1bb207c39f09bf498802d8b5da31e232c1d2f5a0fc145fe8ae07f7ac094b7d08

Sharing

Copy URL Twitter E-mail

General

Target

1bb207c39f09bf498802d8b5da31e232c1d2f5a0fc145fe8ae07f7ac094b7d08
Size

133KB
MD5

7e7bee701259c9790ef261a6004c6ea0
SHA1

d012b0251dda9769a5fadb10ad2ab8fe63884de9
SHA256

1bb207c39f09bf498802d8b5da31e232c1d2f5a0fc145fe8ae07f7ac094b7d08
SHA512

6d5afcf957cc6acca9335d84304f874fdc1bb6381996d54e606d3c42201f1cfc38829a54a0eed5dce791f26bb04cc1aa8d0074d0ec581d15dff271d579a14218
SSDEEP

3072:ivqPlqLHJlwtHsOrD/CXFhUdnTRbyZrnJwTsf2:XULHDPYDaFyRByZVwTo

Score

N/A

Malware Config

Signatures

Files

1bb207c39f09bf498802d8b5da31e232c1d2f5a0fc145fe8ae07f7ac094b7d08
.exe windows x86

4f8cd044020a9cc708da4842246d750b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
GetSystemDefaultLangID
GetDateFormatA
TlsGetValue
OutputDebugStringW
InterlockedCompareExchange
GetCPInfo
HeapSize
GetModuleFileNameW
GetFileAttributesW
WritePrivateProfileStringW
InterlockedIncrement
GetFileAttributesExW
OpenEventW
GetVersionExW
LeaveCriticalSection
IsDebuggerPresent
lstrcatW
WaitForSingleObject
GetUserDefaultLCID
HeapReAlloc
GetComputerNameW
GetWindowsDirectoryW
SetConsoleCtrlHandler
InitializeCriticalSection
FormatMessageW
GetSystemDirectoryW
LoadLibraryExW
DebugBreak
GetCurrentThread
MulDiv
GetModuleHandleA
GetCommandLineW
SystemTimeToTzSpecificLocalTime
CompareStringA
VirtualFree
DeleteCriticalSection
GetCurrentThreadId
GetModuleFileNameA
WaitForMultipleObjects
InterlockedExchange
TlsAlloc
InterlockedDecrement
ResetEvent
GetStringTypeA
RtlUnwind
GetStartupInfoW
GetStdHandle
lstrlenA
CompareStringW
GetOEMCP
GetPrivateProfileIntW
GlobalAlloc
SetUnhandledExceptionFilter
lstrcpynA
FreeLibrary
GetFileType
HeapDestroy
GetConsoleCP
SetStdHandle
GetPrivateProfileStringW
GetLastError
LocalAlloc
SetLastError
RaiseException
lstrcmpiW
GetFileSize
EnumSystemLocalesA
SizeofResource
LockResource
UnhandledExceptionFilter
CopyFileW
MultiByteToWideChar
GetCurrentProcess
HeapAlloc
GetDateFormatW
TlsSetValue
LCMapStringA
lstrcpyW
WritePrivateProfileSectionW
GetStringTypeW
FindAtomA
GetVersion
WriteConsoleA
IsValidCodePage
GlobalSize
WriteConsoleW
LoadLibraryW
FileTimeToSystemTime
CloseHandle
WideCharToMultiByte
GetTempPathW
LocalFree
QueryPerformanceCounter
GetProcAddress
GlobalLock
GetModuleHandleW
Sleep
HeapCreate
ExpandEnvironmentStringsW
GetTempFileNameW
GetConsoleMode
lstrcpynW
FreeEnvironmentStringsW
ExpandEnvironmentStringsA
GetCurrentProcessId
LoadLibraryA
EnterCriticalSection
SetHandleCount
IsProcessorFeaturePresent
lstrlenW
FindNextChangeNotification
FlushInstructionCache
ExitProcess
IsValidLocale
HeapFree
GetEnvironmentStringsW
LoadResource
GlobalUnlock
ReadFile
CreateThread
lstrcmpW
FindResourceW
CreateFileA
FindFirstChangeNotificationW
InitializeCriticalSectionAndSpinCount
CreateFileW
VerLanguageNameW
LCMapStringW
WinExec
GetConsoleOutputCP
GetStartupInfoA
VirtualQuery

user32

SetForegroundWindow
SetDlgItemTextW
SystemParametersInfoW
SetRectEmpty
CreatePopupMenu
CharNextW
BeginDeferWindowPos
IsWindowEnabled
GetSystemMetrics
CreateCaret
LoadStringA
GetMonitorInfoW
UnregisterClassA
OffsetRect
RegisterClassExW
MonitorFromWindow
IntersectRect
GetDC
SetScrollPos
SetFocus
GetClassLongW
PostMessageW
DefMDIChildProcW
GetWindowTextLengthW
SetParent
IsClipboardFormatAvailable
GetWindowDC
GetFocus
DispatchMessageW
CharLowerW
GetClientRect
FindWindowW
FillRect
SetMenuItemInfoW
LoadCursorW
LoadStringW
ReleaseCapture
SetScrollInfo
DeferWindowPos
GetScrollInfo
SetMenuDefaultItem
GetCursorPos
ScreenToClient
IsMenu
DefWindowProcW
TranslateMessage
GetDesktopWindow
CopyRect
SetCursor
OpenClipboard
InflateRect
GetWindowThreadProcessId
GetMenuDefaultItem
KillTimer
GetDlgCtrlID
DrawFocusRect
GetMenuItemInfoW
GetDoubleClickTime
GetSysColorBrush
GetKeyState
SetTimer
TrackPopupMenuEx
CallNextHookEx
LoadIconW
GetClassNameW
SetWindowTextW
GetDlgItemInt
UnhookWindowsHookEx
ReleaseDC
PtInRect
SendMessageW
IsChild
InsertMenuW
ScrollWindowEx
GetClassInfoW
GetMenu
SetMenu
CreateWindowExW
PostQuitMessage
UpdateWindow
LoadMenuW
GetMenuItemID
UnregisterClassW
AppendMenuW
GetWindowRect
GetCapture
TranslateAcceleratorW
MessageBeep
GetWindowLongA
WindowFromPoint
GetSystemMenu
EndPaint
DestroyCaret
DrawFrameControl
BeginPaint
SetCaretPos
DrawMenuBar
GetMenuStringW
GetWindowTextW
GetWindowPlacement
EndDialog
DestroyMenu
DialogBoxParamW
ShowScrollBar
EnableWindow
SetWindowPos
DestroyWindow
GetWindowLongW
BringWindowToTop
EnableMenuItem
SetCapture
EqualRect
ModifyMenuW
RegisterWindowMessageW
PeekMessageW
DragDetect
wvsprintfW
CallWindowProcW
LoadAcceleratorsW
RegisterClassW
SetDlgItemInt
CloseClipboard
EmptyClipboard
ClientToScreen
GetDlgItemTextW
DefFrameProcW
MapWindowPoints
GetMessageW
LockWindowUpdate
TranslateMDISysAccel
LoadImageW
SetClipboardData
TrackPopupMenu
GetActiveWindow
GetMessagePos
GetWindow
GetSubMenu
GetParent
SetWindowsHookExW
MessageBoxW
DrawEdge
MoveWindow
RegisterClipboardFormatW
FrameRect
EndDeferWindowPos
IsWindowVisible
InvalidateRect
RedrawWindow
RemoveMenu

gdi32

GetDeviceCaps
GetViewportOrgEx
GetObjectW
DPtoLP
SetBkColor
SelectClipRgn
CreatePalette
LineTo
CreateCompatibleBitmap
CreateRectRgn
CreateCompatibleDC
BitBlt
IntersectClipRect
CreatePatternBrush
SetViewportOrgEx
CreatePen
CreateDIBSection
Polyline
TextOutW
SelectObject
SetTextColor
PatBlt
GetTextExtentPoint32W
SetBkMode
GetClipRgn
MoveToEx
Rectangle
CreateFontW
GetClipBox
LPtoDP
RestoreDC
CreateSolidBrush
CreateBitmap
ExtTextOutW
GetStockObject
SelectPalette
SetBrushOrgEx
CreateFontIndirectW
SaveDC
GetTextExtentPointW
RealizePalette
GetTextMetricsW
DeleteDC
DeleteObject
SetPolyFillMode
Polygon
SetWindowOrgEx

comdlg32

GetFileTitleW

oleaut32

VarDecCmp
SysFreeString
SystemTimeToVariantTime
VarUI4FromStr
VarR8FromStr
VarI4FromStr
VarDecFromStr

wsock32

ntohs
htons
WSAAsyncSelect
bind
socket
listen
connect
accept
ioctlsocket
shutdown
WSAGetLastError
getsockname
recv
inet_addr
WSASetLastError
getpeername
gethostbyname
send
closesocket

msvcrt

fclose
_i64toa
strchr
atol
wcslen
atoi
_setmbcp
__p__commode
_initterm
rand
_purecall
time
__getmainargs
_acmdln
exit
_strnicmp
__CxxFrameHandler
strncmp
_controlfp
_adjust_fdiv
fopen
fwrite
localtime
_ftol
__setusermatherr
sprintf
_exit
__dllonexit
_XcptFilter
__set_app_type
memmove
_stricmp
__p__fmode
_except_handler3
_onexit

msacm32

acmDriverID

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f8cd044020a9cc708da4842246d750b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

oleaut32

wsock32

msvcrt

msacm32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 70KB - Virtual size: 353KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 70KB - Virtual size: 353KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB