4d1e3370624a6328cd5ecff74cf582b45459c08d8ea76ff9760452b379085244

Sharing

Copy URL Twitter E-mail

General

Target

4d1e3370624a6328cd5ecff74cf582b45459c08d8ea76ff9760452b379085244
Size

740KB
MD5

bac2c4311a3df43f1120334ec0178da6
SHA1

6a1d97c3fb0d4b2bb2f24d2131a49ffee3bf5f2c
SHA256

4d1e3370624a6328cd5ecff74cf582b45459c08d8ea76ff9760452b379085244
SHA512

2691fa633843f4a332d3008047b2493e941e6a8f01e4c5d4650b8415fa00c5dbd46a5e445dc9c45cad5e8cc164aa5835f8945ffedbac0534617d09f474b388aa
SSDEEP

12288:dif3HrP3h1pMs1bQBSKifkWp4GMMP9jKllSGqab/mn0KofaR1AnwL:gf3HrJMsCuJVMW9j9KjKopn

Score

N/A

Malware Config

Signatures

Files

4d1e3370624a6328cd5ecff74cf582b45459c08d8ea76ff9760452b379085244
.exe windows x86

39cb48d22c2740d929c66c63893bcc24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wpespy

SetLoggingActi
SetTargetPid
GetFilterState
SetFilter
SetFilterState
SetClientHwnd

kernel32

IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetModuleHandleA
CloseHandle
OpenProcess
GetModuleFileNameA
FreeLibrary
VirtualFreeEx
ReadProcessMemory
WaitForSingleObject
CreateRemoteThread
LoadLibraryA
GetStringTypeW
WriteProcessMemory
GetLastError
VirtualAllocEx
GetVersionExA
lstrlenA
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalSize
MulDiv
GlobalAlloc
CreateEventA
SetEvent
GetTickCount
GetSystemDirectoryA
GetStringTypeA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetACP
HeapSize
TerminateProcess
GetFileType
SetStdHandle
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapReAlloc
ExitThread
CreateThread
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
HeapAlloc
HeapFree
lstrcpyA
GlobalDeleteAtom
InterlockedExchange
VirtualProtectEx
GetProfileStringA
RtlUnwind
CopyFileA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
GetCurrentThread
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GetProfileIntA
lstrcmpA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
GlobalFindAtomA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GlobalFree
SuspendThread
SetThreadPriority
ResumeThread
lstrcpynA
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
SetLastError
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA

user32

GetDCEx
LockWindowUpdate
PostThreadMessageA
GetTabbedTextExtentA
MapDialogRect
GetAsyncKeyState
CharUpperA
EndDialog
CreateDialogIndirectParamA
SetCursorPos
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadAcceleratorsA
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
LoadStringA
GetMessageA
TranslateMessage
ValidateRect
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetWindowDC
LoadIconA
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
SetActiveWindow
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
GetTopWindow
MessageBoxA
WinHelpA
wsprintfA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
DestroyWindow
CreateWindowExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetWindowPos
IsIconic
GetWindowPlacement
RegisterWindowMessageA
GetDlgItem
CallWindowProcA
SetWindowLongA
IsRectEmpty
EqualRect
GetDoubleClickTime
ShowScrollBar
IsChild
GetWindowTextA
SetFocus
PostQuitMessage
SetForegroundWindow
PeekMessageA
BringWindowToTop
IsWindowVisible
EnumWindows
AppendMenuA
CreatePopupMenu
UpdateWindow
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowThreadProcessId
EmptyClipboard
RegisterClipboardFormatA
SetScrollInfo
EnableScrollBar
CreateCaret
DragDetect
SetScrollPos
DestroyCaret
SetCaretPos
IsWindowUnicode
ShowCaret
EnableMenuItem
GetFocus
GetMessagePos
IsClipboardFormatAvailable
GetKeyState
IntersectRect
IsWindow
SetRect
DrawEdge
GetDC
ReleaseDC
GetClipCursor
ClipCursor
InvertRect
SetRectEmpty
GetClassInfoA
DefWindowProcA
GetWindow
GetSystemMetrics
GetCapture
RedrawWindow
LoadBitmapA
BeginPaint
EndPaint
FindWindowA
GetClassNameA
ShowOwnedPopups
GetSystemMenu
DeleteMenu
SetParent
GetWindowTextLengthA
IsZoomed
PostMessageA
FillRect
LoadMenuA
GetIconInfo
DrawStateA
CopyRect
FrameRect
DrawFocusRect
GetSubMenu
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
SetCursor
GetParent
GetNextDlgTabItem
SendMessageA
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
KillTimer
InflateRect
ReleaseCapture
PtInRect
OffsetRect
GetSysColorBrush
LoadImageA
LoadCursorA
RegisterClassExA
SetWindowRgn
DrawIconEx
DrawFrameControl
GetDesktopWindow
GetWindowRect
SystemParametersInfoA
SetTimer
GetCursorPos
ScreenToClient
SetCapture
EnableWindow
GrayStringA
DrawTextA
TabbedTextOutA
GetSysColor
InvalidateRect
GetClientRect
CharNextA
DefDlgProcA
ExcludeUpdateRgn
HideCaret
UnregisterClassA
GetDlgCtrlID

gdi32

GetTextExtentPoint32A
GetDeviceCaps
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
GetCharWidthA
SetBoundsRect
SetViewportOrgEx
GetViewportOrgEx
PatBlt
CreateHalftonePalette
CreatePalette
GetDIBColorTable
RealizePalette
FillRgn
GetClipBox
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
GetCurrentObject
SetTextAlign
GetCurrentPositionEx
PolylineTo
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
SetRectRgn
CreateRectRgnIndirect
StretchDIBits
SetAbortProc
CreateDCA
CopyMetaFileA
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
SelectObject
DeleteObject
OffsetRgn
FrameRgn
CreateRoundRectRgn
CreateRectRgn
CombineRgn
GetStockObject
GetObjectA
CreateFontIndirectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePolygonRgn
Rectangle
CreateFontA
GetTextMetricsA
CreateSolidBrush
CreatePen
Polygon
CreateCompatibleDC
LPtoDP
CreateCompatibleBitmap
GetMapMode
DPtoLP
GetBkColor
GetTextExtentPointA
LineTo
CreateDIBitmap
BitBlt

comdlg32

GetFileTitleA
GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteExA
ShellExecuteA
ExtractIconA

comctl32

ImageList_AddMasked
ord14
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_SetBkColor
ord17
ord13
ImageList_Destroy
ImageList_Create
ImageList_DrawIndirect
PropertySheetA
DestroyPropertySheetPage
ImageList_Draw
CreatePropertySheetPageA

oledlg

ord8

ole32

CoRegisterMessageFilter
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoTaskMemFree
ReleaseStgMedium
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
OleSetClipboard
OleGetClipboard

Sections

.text
Size: 524KB - Virtual size: 523KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39cb48d22c2740d929c66c63893bcc24

Headers

File Characteristics

Imports

wpespy

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

Sections

.text Size: 524KB - Virtual size: 523KB

.rdata Size: 104KB - Virtual size: 102KB

.data Size: 16KB - Virtual size: 151KB

Shared Size: 4KB - Virtual size: 4B

.rsrc Size: 88KB - Virtual size: 87KB

.text
Size: 524KB - Virtual size: 523KB

.rdata
Size: 104KB - Virtual size: 102KB

.data
Size: 16KB - Virtual size: 151KB

Shared
Size: 4KB - Virtual size: 4B

.rsrc
Size: 88KB - Virtual size: 87KB