bf0a0066a2704154b6e818a62222a4e2d09748b57d90f2ab296d2914c202eaa8

Sharing

Copy URL Twitter E-mail

General

Target

bf0a0066a2704154b6e818a62222a4e2d09748b57d90f2ab296d2914c202eaa8
Size

182KB
MD5

8e74ad154e1c2fd4c77cd9f57ef61638
SHA1

78c515ee829dd5bb14bb75e2fd32592ad8143c67
SHA256

bf0a0066a2704154b6e818a62222a4e2d09748b57d90f2ab296d2914c202eaa8
SHA512

85a57fbb392058a5484270c8c18567f45a24f847960cab84d4b3e94366313bf9a348ae2b0fb1882dc88d18b6e85ed66833d00313e4c03591b2f9312528b0a88d
SSDEEP

3072:5Mol58J5hGehMJXmUW+/gLQB06iLsN/awuKpnkha8:Sol5hehMJXzWo7Ni0nk

Score

N/A

Malware Config

Signatures

Files

bf0a0066a2704154b6e818a62222a4e2d09748b57d90f2ab296d2914c202eaa8
.exe windows x86

cbcbf09afb89b30a168e8e0aa3f774dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetTickCount
OutputDebugStringA
GlobalMemoryStatus
GetSystemInfo
InterlockedDecrement
OpenEventA
CreateMutexA
GetCurrentThreadId
CopyFileA
CreatePipe
DisconnectNamedPipe
TerminateProcess
WriteFile
WaitForMultipleObjects
lstrcpyW
LocalSize
GlobalMemoryStatusEx
WinExec
lstrcmpiA
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateRemoteThread
GetModuleHandleA
OpenProcess
Module32Next
Module32First
ExitThread
GetCurrentProcessId
HeapFree
GetLocalTime
GetSystemDirectoryA
SetFilePointer
GetSystemTime
CreateFileA
GetFileSize
RemoveDirectoryA
LocalAlloc
FindFirstFileA
LocalReAlloc
FindNextFileA
LocalFree
FindClose
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetDriveTypeA
CreateProcessA
GetFileAttributesA
CreateDirectoryA
GetLastError
DeleteFileA
GetVersionExA
GetPrivateProfileStringA
lstrcmpA
WideCharToMultiByte
CreateEventA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
lstrcpyA
lstrcatA
GetPrivateProfileSectionNamesA
lstrlenA
Sleep
CancelIo
InterlockedExchange
ResetEvent
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
VirtualFree
DeleteCriticalSection
InitializeCriticalSection
CreateThread
ResumeThread
SetEvent
WaitForSingleObject
GetModuleFileNameA
GetShortPathNameA
GetEnvironmentVariableA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetStartupInfoA
ReadFile
MoveFileA
TerminateThread
CloseHandle
PeekNamedPipe

user32

EmptyClipboard
OpenClipboard
GetClipboardData
GetSystemMetrics
SetRect
GetDC
GetDesktopWindow
ReleaseDC
SendMessageA
GetCursorInfo
PostThreadMessageA
GetInputState
RegisterClassA
LoadIconA
GetWindowThreadProcessId
SetClipboardData
EnumWindows
ExitWindowsEx
CloseDesktop
SetThreadDesktop
OpenInputDesktop
BlockInput
DestroyCursor
LoadCursorA
GetKeyState
GetAsyncKeyState
DispatchMessageA
CloseClipboard
SetCursorPos
WindowFromPoint
SetCapture
mouse_event
GetForegroundWindow
GetWindowTextA
MessageBoxA
CharNextA
MapVirtualKeyA
keybd_event
IsWindowVisible
SystemParametersInfoA
GetUserObjectInformationA
TranslateMessage
GetThreadDesktop
OpenDesktopA
PostMessageA
CreateWindowExA
CloseWindow
IsWindow
GetCursorPos
GetMessageA
wsprintfA

gdi32

BitBlt
DeleteDC
DeleteObject
GetDIBits
CreateDIBSection
SelectObject
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC

advapi32

RegEnumKeyExA
LookupAccountNameA
IsValidSid
LsaRetrievePrivateData
LsaOpenPolicy
LsaFreeMemory
RegCloseKey
RegQueryValueA
RegOpenKeyExA
CloseEventLog
ClearEventLogA
OpenEventLogA
RegSetValueExA
RegCreateKeyA
DeleteService
OpenServiceA
OpenSCManagerA
FreeSid
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegEnumValueA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
CloseServiceHandle
StartServiceA
UnlockServiceDatabase
ChangeServiceConfig2A
LockServiceDatabase
CreateServiceA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
ControlService
QueryServiceStatus
AbortSystemShutdownA
GetUserNameA
LookupAccountSidA
GetTokenInformation
LsaClose

shell32

SHGetSpecialFolderPathA
SHGetFileInfoA
ShellExecuteA

ole32

CoUninitialize
CoInitialize
CLSIDFromProgID
OleRun
CoCreateInstance
CLSIDFromString

oleaut32

SysAllocString
VariantClear
GetErrorInfo
SysFreeString

msvcrt

__getmainargs
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_strcmpi
_strrev
_stricmp
_strnicmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
wcslen
_acmdln
_XcptFilter
_exit
_iob
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
_snprintf
_beginthreadex
_mbscmp
_mbsstr
sprintf
atol
wcscpy
_errno
strncmp
rand
atoi
strncpy
realloc
strncat
strcat
exit
strrchr
_except_handler3
free
strcmp
strcpy
malloc
strchr
_CxxThrowException
memcmp
strstr
strlen
_ftol
ceil
memmove
__CxxFrameHandler
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
memset

winmm

waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveOutWrite
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutUnprepareHeader
waveInStop
waveOutReset
waveInClose
waveOutPrepareHeader
waveInReset
waveInUnprepareHeader

ws2_32

gethostname
send
getsockname
select
recv
socket
gethostbyname
htons
setsockopt
WSAIoctl
WSACleanup
WSAStartup
htonl
WSASocketA
ioctlsocket
__WSAFDIsSet
recvfrom
sendto
listen
accept
getpeername
bind
ntohs
inet_addr
closesocket
inet_ntoa
connect

urlmon

URLDownloadToFileA

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

avicap32

capGetDriverDescriptionA
capCreateCaptureWindowA

msvfw32

ICSeqCompressFrame
ICSeqCompressFrameEnd
ICCompressorFree
ICSeqCompressFrameStart
ICSendMessage
ICOpen
ICClose

netapi32

NetUserSetInfo
NetUserAdd
NetLocalGroupAddMembers
NetApiBufferFree
NetUserEnum
NetUserGetInfo
NetUserDel

psapi

GetModuleFileNameExA
EnumProcesses
GetModuleBaseNameA
EnumProcessModules

wtsapi32

WTSEnumerateSessionsA
WTSFreeMemory
WTSQuerySessionInformationA
WTSDisconnectSession
WTSLogoffSession
WTSQuerySessionInformationW

Sections

.data
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cbcbf09afb89b30a168e8e0aa3f774dc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcrt

winmm

ws2_32

urlmon

wininet

avicap32

msvfw32

netapi32

psapi

wtsapi32

Sections

.data Size: 159KB - Virtual size: 159KB

.rsrc Size: 21KB - Virtual size: 24KB

.data
Size: 159KB - Virtual size: 159KB

.rsrc
Size: 21KB - Virtual size: 24KB