8eaf2b00afdfe22f1704cde8741f019a1b87122f567c0343357d32e01c3a9c24

Sharing

Copy URL

Twitter E-mail

General

Target

8eaf2b00afdfe22f1704cde8741f019a1b87122f567c0343357d32e01c3a9c24
Size

654KB
MD5

d9f35d8953642eb76bfa8567941e1072
SHA1

1edefe49d67477c2d9ebf30359ed1148d24d3e2a
SHA256

8eaf2b00afdfe22f1704cde8741f019a1b87122f567c0343357d32e01c3a9c24
SHA512

26f49e24643e81d247a524846157c7aba0013225f44987e8f8beee263f5459f980b7c8843ce6eb78e6f3ce7e8541174839c1635c1a65dbb3d8586501384b4123
SSDEEP

12288:phMLx1+fBIZsUOHrCgZ4F1U6Eyl6q2maln3jaSiHKO:7HBIZvXgZ4sBmalnzaShO

Score

N/A

Malware Config

Signatures

Files

8eaf2b00afdfe22f1704cde8741f019a1b87122f567c0343357d32e01c3a9c24
.exe windows x86

1a79daf654a6bada96b67c3b178954b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetHandleCount
LCMapStringW
LCMapStringA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
Sleep
HeapDestroy
GetEnvironmentVariableA
SetStdHandle
HeapSize
GetACP
TerminateProcess
HeapReAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
GetFileType
GetDriveTypeA
RemoveDirectoryA
CreateDirectoryA
ExitThread
GetLocalTime
GetTimeZoneInformation
RaiseException
RtlUnwind
GetTickCount
SetErrorMode
FindNextFileA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetFileTime
GetFileSize
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
InterlockedExchange
GetProfileStringA
DuplicateHandle
LocalAlloc
GetCurrentThread
SuspendThread
SetThreadPriority
ResumeThread
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetWindowsDirectoryA
MulDiv
GetCurrentProcess
FlushInstructionCache
VirtualProtect
SetLastError
GetSystemTime
SetEvent
CreateEventA
GlobalLock
GlobalUnlock
HeapFree
GetProcessHeap
HeapAlloc
GetTempFileNameA
lstrlenA
GetModuleFileNameA
GetVersion
GetVersionExA
lstrcpyA
lstrcmpA
lstrcmpiA
GetCurrentThreadId
GetModuleHandleA
DeleteFileA
FindResourceA
SizeofResource
LoadResource
LockResource
GetTempPathA
CreateThread
GetSystemInfo
PostQueuedCompletionStatus
DeleteCriticalSection
GetLastError
GlobalAlloc
CreateIoCompletionPort
GetQueuedCompletionStatus
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileAttributesA
CreateFileA
WriteFile
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
GetCurrentDirectoryA
InitializeCriticalSection
LoadLibraryA
GetProcAddress
FreeLibrary
TerminateThread
WaitForSingleObject
CloseHandle

user32

SetParent
PostThreadMessageA
CharNextA
GrayStringA
TabbedTextOutA
SetRectEmpty
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
TranslateMessage
wvsprintfA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
PeekMessageA
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
TrackPopupMenu
GetWindowTextLengthA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
RegisterWindowMessageA
GetNextDlgTabItem
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
CreateIconIndirect
DrawTextExA
GetCapture
SetFocus
GetMessagePos
WindowFromDC
FrameRect
MapWindowPoints
RegisterClipboardFormatA
SetCursor
SystemParametersInfoA
LoadStringA
DestroyCursor
CharLowerA
GetWindowPlacement
DrawMenuBar
IsMenu
EqualRect
ValidateRect
IntersectRect
GetWindowWord
SetWindowWord
DrawStateA
DestroyIcon
GetFocus
IsWindowEnabled
DrawFrameControl
GetWindowTextA
CharUpperBuffA
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
GetClassLongA
GetSystemMenu
CreatePopupMenu
AppendMenuA
DestroyMenu
GetMenuItemInfoA
GetDesktopWindow
LockWindowUpdate
IsWindowVisible
SetCapture
ReleaseCapture
DestroyWindow
DrawEdge
FillRect
BeginPaint
EndPaint
ClientToScreen
SetForegroundWindow
UpdateWindow
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
UnregisterClassA
CreateWindowExA
GetKeyState
CopyAcceleratorTableA
GetMenu
OffsetRect
IsRectEmpty
GetWindowInfo
GetWindow
IsZoomed
MoveWindow
ShowWindow
GetWindowDC
RemovePropA
SetPropA
CallWindowProcA
GetDCEx
MessageBeep
CopyIcon
GetNextDlgGroupItem
DefWindowProcA
DispatchMessageA
GetMessageA
GetActiveWindow
GetClassNameA
GetPropA
GetMenuState
wsprintfA
CopyRect
PtInRect
InvalidateRect
PostMessageA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetParent
SetMenu
GetMenuItemCount
GetMenuItemID
GetWindowLongA
SetWindowLongA
GetIconInfo
IsWindow
WindowFromPoint
ReleaseDC
InflateRect
GetSysColor
DrawIconEx
GetDC
RedrawWindow
GetWindowRect
SetWindowRgn
LoadCursorA
GetSysColorBrush
RegisterClassExA
SetRect
GetCursorPos
ScreenToClient
LoadMenuA
GetSubMenu
LoadImageA
ScrollDC
LoadBitmapA
DrawTextA
KillTimer
SetTimer
GetDlgCtrlID
SetWindowPos
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
MessageBoxA
SendMessageA
EnableWindow
CharUpperA
HideCaret

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetViewportExtEx
GetWindowExtEx
PtVisible
Escape
GetMapMode
SetRectRgn
DPtoLP
GetTextColor
LPtoDP
SelectPalette
StretchBlt
GetCharWidthA
SetWindowOrgEx
PlayEnhMetaFile
CreatePatternBrush
SetBrushOrgEx
PatBlt
UnrealizeObject
ExtTextOutA
GetTextMetricsA
GetRgnBox
SelectClipRgn
IntersectClipRect
TextOutA
CreatePen
MoveToEx
LineTo
ExtFloodFill
ExcludeClipRect
PtInRegion
StretchDIBits
RectVisible
GetClipBox
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
CreateDIBSection
CreateDIBitmap
SaveDC
RestoreDC
CreateCompatibleBitmap
SetBkColor
CreateICA
GetDIBits
DeleteDC
GetRegionData
ExtCreateRegion
GetTextExtentPointA
SetTextColor
SetBkMode
CreateRectRgnIndirect
OffsetRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateSolidBrush
FillRgn
FrameRgn
SelectObject
GetPixel
CreateRectRgn
CombineRgn
DeleteObject
GetStockObject
CreateFontIndirectA
CreateFontA
GetObjectA
GetTextExtentPoint32A
GetBkColor
CreateBitmap
GetDeviceCaps
RealizePalette
CreateCompatibleDC
BitBlt
Polygon

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA

shell32

ExtractIconExA
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ImageList_GetIconSize
ImageList_DrawEx
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_Create
ImageList_AddMasked
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_GetIcon
ImageList_Destroy
ImageList_GetImageCount
ord17
ImageList_Draw

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromString
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromProgID

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

wsock32

WSAGetLastError
socket
accept
connect
send
select
recv
bind
gethostname
getsockname
ntohs
ntohl
setsockopt
listen
shutdown
getpeername
closesocket
WSAStartup
htonl
ioctlsocket
gethostbyname
WSACleanup
inet_addr
htons

ws2_32

WSASend
WSAAccept
WSARecv
WSASocketA

wininet

InternetCloseHandle
InternetGetLastResponseInfoA
FtpPutFileA
InternetConnectA
InternetOpenA
InternetSetStatusCallback

Sections

.text
Size: 528KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 652KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a79daf654a6bada96b67c3b178954b7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

ws2_32

wininet

Sections

.text Size: 528KB - Virtual size: 524KB

.rdata Size: 84KB - Virtual size: 82KB

.data Size: 36KB - Virtual size: 120KB

.rsrc Size: 652KB - Virtual size: 652KB

.text
Size: 528KB - Virtual size: 524KB

.rdata
Size: 84KB - Virtual size: 82KB

.data
Size: 36KB - Virtual size: 120KB

.rsrc
Size: 652KB - Virtual size: 652KB