985a228e5576edf641b3d489b89716506cc2e7b549c91831ed7e553bed69c065

Sharing

Copy URL Twitter E-mail

General

Target

985a228e5576edf641b3d489b89716506cc2e7b549c91831ed7e553bed69c065
Size

3.4MB
MD5

d4713c4302d45441e972f3a76c6bd199
SHA1

8c68c2aa5ac5917ab402aa07049623c35a5d2e6a
SHA256

985a228e5576edf641b3d489b89716506cc2e7b549c91831ed7e553bed69c065
SHA512

1ce6071038a3ba2f28c2a015e53b2fd5e6fee574e7dfb6732a5bef0d393271e6f281a2fe481b7e994eecb644ee812a54ada30bb6e0564c01d9a7a2baf7b908c5
SSDEEP

49152:Jo1swSUHXU+2UySU89UwfFiqXMAwNokXW2SYS:J/UHXU+2UySU89UwfQSSSP

Score

N/A

Malware Config

Signatures

Files

985a228e5576edf641b3d489b89716506cc2e7b549c91831ed7e553bed69c065
.exe windows x86

1ff4b9b36aa2c24206a8c3c4e2d86759

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

send
WSAStartup
accept
inet_addr
setsockopt
htonl
htons
bind
WSAGetLastError
closesocket
listen
recv
connect
recvfrom
WSAAsyncSelect
socket
ioctlsocket
gethostname
gethostbyname
shutdown
WSACleanup
sendto

ws2_32

WSAAccept
WSARecv
WSASocketA
WSASendTo
WSASend

mumsg

??1CMsg@@QAE@XZ
??0CMsg@@QAE@XZ
?Get@CMsg@@QAEPADH@Z
?LoadWTF@CMsg@@QAEXPAD@Z

comctl32

ord17

dbghelp

SymLoadModule
SymGetOptions
SymSetOptions
SymInitialize
SymFunctionTableAccess
SymGetLineFromAddr
SymGetSymFromAddr
SymGetModuleInfo
StackWalk

kernel32

GetCurrentProcess
GetModuleFileNameA
VirtualQueryEx
OutputDebugStringA
GetPrivateProfileStringA
FindFirstFileA
InterlockedExchange
InterlockedDecrement
InterlockedExchangeAdd
FreeLibrary
GetProcAddress
LoadLibraryA
WriteFile
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
LocalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
SetLastError
lstrcpynA
lstrcmpA
LocalAlloc
TlsAlloc
GlobalUnlock
GlobalHandle
TlsFree
GlobalLock
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThreadId
SuspendThread
CreateEventA
GetCurrentThread
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
LockResource
LoadResource
FindResourceA
GetProcessVersion
MulDiv
GlobalFlags
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
GetCurrentDirectoryA
SetErrorMode
DuplicateHandle
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetFileAttributesA
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
RtlUnwind
ExitThread
GetTimeZoneInformation
GetSystemTime
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
RaiseException
HeapSize
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FatalAppExitA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetThreadContext
CreateFileA
CreateDirectoryA
GlobalAlloc
GlobalFree
GetProcessHeap
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
GetSystemInfo
CreateIoCompletionPort
PostQueuedCompletionStatus
GetLastError
FormatMessageA
TerminateThread
OpenFile
GetFileSize
_lclose
ReadFile
GetPrivateProfileIntA
GetLocalTime
InterlockedIncrement
Sleep
WaitForSingleObject
CloseHandle
CreateThread
GetTickCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpyA

user32

EnableWindow
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
UnhookWindowsHookEx
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
OemToCharA
ScreenToClient
AdjustWindowRectEx
SetFocus
SetActiveWindow
GetSysColor
MapWindowPoints
SendDlgItemMessageA
PostMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
GetSysColorBrush
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
CharUpperA
DefWindowProcA
KillTimer
DestroyWindow
PostQuitMessage
CreateWindowExA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
SetTimer
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SetWindowTextA
GetClientRect
FillRect
CallWindowProcA
SetWindowLongA
GetDC
ReleaseDC
SetRect
MessageBoxA
IsWindow
CreateDialogParamA
ShowWindow
GetDlgItem
EndDialog
SetDlgItemTextA
SendMessageA
wsprintfA
CharToOemA
EqualRect
DialogBoxParamA

gdi32

IntersectClipRect
Escape
ExtTextOutA
RectVisible
PtVisible
OffsetClipRgn
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
CreateDIBPatternBrushPt
MoveToEx
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
SetTextColor
CreateSolidBrush
CreateFontA
DeleteObject
SelectObject
SetBkMode
GetStockObject
CreateBitmap
GetDCOrgEx
GetClipBox
SetBkColor
GetObjectA
GetDeviceCaps
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectPalette
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
TextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

shell32

DragAcceptFiles
SHGetFileInfoA

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 193.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 448KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ff4b9b36aa2c24206a8c3c4e2d86759

Headers

File Characteristics

Imports

wsock32

ws2_32

mumsg

comctl32

dbghelp

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 152KB - Virtual size: 148KB

.data Size: 64KB - Virtual size: 193.9MB

.idata Size: 16KB - Virtual size: 12KB

.rsrc Size: 16KB - Virtual size: 12KB

.reloc Size: 448KB - Virtual size: 445KB

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 152KB - Virtual size: 148KB

.data
Size: 64KB - Virtual size: 193.9MB

.idata
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 16KB - Virtual size: 12KB

.reloc
Size: 448KB - Virtual size: 445KB