2fe26d980c968d57a4d76fe2eae6bf291c8b7cfa846b14a77bb2ab1469227077

Sharing

Copy URL Twitter E-mail

General

Target

2fe26d980c968d57a4d76fe2eae6bf291c8b7cfa846b14a77bb2ab1469227077
Size

720KB
MD5

f1fcbb8b947b244ba25b71b988324435
SHA1

b15fc90f307b0c2eaf26ef43c2faacf87f9ab5c0
SHA256

2fe26d980c968d57a4d76fe2eae6bf291c8b7cfa846b14a77bb2ab1469227077
SHA512

90bcad8d80cd4036a05302e3656492fea868127a8e317fe603f49320495fd42f6b25a7fd664afcdcf0ff8f2b90fe2d0b272c15b467e72494fa4fe8f5589f9da7
SSDEEP

12288:i9yuU/7s7O25KroRMl66osecsBF2qP9/7eo66owN0rmJM:i9TR90wyecQ2M9/iG9UmG

Score

N/A

Malware Config

Signatures

Files

2fe26d980c968d57a4d76fe2eae6bf291c8b7cfa846b14a77bb2ab1469227077
.exe windows x86

a03d55e80de22c3fbb91cb2b496cf72e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
FreeEnvironmentStringsW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
SetHandleCount
GetACP
HeapSize
HeapReAlloc
GetFileType
SetStdHandle
HeapCreate
HeapAlloc
RaiseException
GetCommandLineA
GetStartupInfoA
ExitThread
CreateThread
ExitProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetProfileStringA
GetWindowsDirectoryA
FlushInstructionCache
VirtualProtect
VirtualQuery
GetCurrentProcessId
GetSystemInfo
GetProcessHeap
GetTempPathA
GetTempFileNameA
GetEnvironmentStringsW
HeapDestroy
HeapFree
GetEnvironmentStrings
GetFileSize
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
MulDiv
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
SetLastError
CreateEventA
SetEvent
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
FreeLibrary
GetPrivateProfileIntA
GetPrivateProfileStringA
TerminateProcess
CopyFileA
ReadProcessMemory
GetTickCount
FindResourceA
SizeofResource
LoadResource
LockResource
CreateMutexA
GetLastError
GetVersionExA
DeviceIoControl
GetSystemDirectoryA
CreateFileA
GetFileTime
Process32First
Process32Next
CreateToolhelp32Snapshot
Module32First
Module32Next
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
GetProcAddress
CreateRemoteThread
WaitForSingleObject
CloseHandle
VirtualFreeEx
Sleep
InterlockedExchange

user32

LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
CopyRect
IsWindowVisible
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
EnableWindow
SendMessageA
PostMessageA
GetWindowTextA
FindWindowExA
LoadIconA
SetTimer
KillTimer
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
ReleaseDC
GetDC
PostQuitMessage
SetCursor
ValidateRect
TranslateMessage
GetMessageA
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetForegroundWindow
GetMenuCheckMarkDimensions
RemoveMenu
GetSubMenu
LoadMenuA
GetWindowThreadProcessId
ShowCursor
SetWindowLongA
GetForegroundWindow
IsWindow
ShowWindow
ScreenToClient
IsWindowEnabled
GetDlgItem
GetWindowLongA
GetParent
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
CreateIconIndirect
DrawTextExA
CopyIcon
LoadImageA
SetWindowContextHelpId
MapDialogRect
CharUpperA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
GetClassNameA
PtInRect
GetDesktopWindow
LoadCursorA
GetSysColorBrush
LoadStringA
InflateRect
SetCapture
ReleaseCapture
CharNextA
DestroyIcon
PostThreadMessageA
RegisterClipboardFormatA
InvalidateRect
CopyAcceleratorTableA
SetMenu
DestroyCursor
CharLowerA
DrawMenuBar
IsMenu
GetWindowWord
SetWindowWord
EnumChildWindows
DrawStateA
DrawFrameControl
CharUpperBuffA
GetIconInfo
EnableScrollBar
DrawIconEx
GetSystemMenu
CreatePopupMenu
InsertMenuItemA
GetMenuItemInfoA
LockWindowUpdate
DrawEdge
FillRect
UnregisterClassA
RegisterClassExA
IsRectEmpty
GetCursorPos
MessageBeep
GetNextDlgGroupItem
SetRect
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
RedrawWindow
SetWindowRgn
IsZoomed
GetWindowInfo

gdi32

MoveToEx
LineTo
DeleteObject
GetClipRgn
CreateRectRgn
ExtSelectClipRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
GetMapMode
CombineRgn
DPtoLP
GetTextColor
GetBkColor
LPtoDP
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
OffsetRgn
BitBlt
GetTextExtentPointA
ExtCreateRegion
GetRegionData
GetDIBits
CreateICA
RealizePalette
CreateCompatibleBitmap
CreateCompatibleDC
StretchBlt
Polygon
CreateDIBitmap
CreateDIBSection
SetDIBitsToDevice
StretchDIBits
PtInRegion
GetPixel
GetRgnBox
UnrealizeObject
SetBrushOrgEx
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
Escape
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

ExtractIconExA
SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconA
ShellExecuteA

comctl32

ImageList_Destroy
ord17
ImageList_DrawEx
ImageList_GetIconSize
_TrackMouseEvent
ImageList_Draw
ImageList_GetIcon
ImageList_GetImageCount

oledlg

ord8

ole32

CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear

wsock32

socket
htonl
htons
bind
closesocket
connect
send
inet_ntoa
recv
WSACleanup
WSAStartup

shlwapi

PathFileExistsA

psapi

GetModuleFileNameExA

netapi32

Netbios

hook

ord1

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 440KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a03d55e80de22c3fbb91cb2b496cf72e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

shlwapi

psapi

netapi32

hook

imagehlp

Sections

.text Size: 440KB - Virtual size: 436KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 24KB - Virtual size: 110KB

.rsrc Size: 184KB - Virtual size: 183KB

.text
Size: 440KB - Virtual size: 436KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 24KB - Virtual size: 110KB

.rsrc
Size: 184KB - Virtual size: 183KB