a68dd0671abeba42b985d026059edcdad086e4e701b7c8f1e663daac2f7045e3

Sharing

Copy URL

Twitter E-mail

General

Target

a68dd0671abeba42b985d026059edcdad086e4e701b7c8f1e663daac2f7045e3
Size

232KB
MD5

a990ee1a14bf07e66d34bef6f5d059da
SHA1

0dd41c5c11362ae02c14d393e93296be0d520cb4
SHA256

a68dd0671abeba42b985d026059edcdad086e4e701b7c8f1e663daac2f7045e3
SHA512

42b01e052a8fdf0675f406ceb892b875ecae55d69e3587228d132d4ff160e8284568d29c116bda09ffca7de48dcfdb314564c3b0f281ccafcce023d7ad4ea1c8
SSDEEP

3072:Q832c+WbjPb4fti0pXRHxNGjYLTem6RzB7WVnk3J040NQpoOA3CZuy3gd:bNjPb6FRHxNaYLqWuC3MZH3

Score

N/A

Malware Config

Signatures

Files

a68dd0671abeba42b985d026059edcdad086e4e701b7c8f1e663daac2f7045e3
.exe windows x86

f2dbf5a33fb24cd163afa72056c04928

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
GetTickCount
ExitProcess
SetCurrentDirectoryA
RtlUnwind
GetStartupInfoA
HeapAlloc
HeapFree
CreateThread
ExitThread
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
FileTimeToLocalFileTime
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetExitCodeProcess
CreateProcessA
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToSystemTime
SetErrorMode
SizeofResource
CreateDirectoryA
GetProfileStringA
GetProcessVersion
GetCurrentDirectoryA
WritePrivateProfileStringA
GlobalFlags
GetFileTime
GetFileSize
GetFileAttributesA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
MulDiv
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
FindNextFileA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
FormatMessageA
LocalFree
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
SetLastError
GetDriveTypeA
CreateToolhelp32Snapshot
Process32First
OpenProcess
TerminateProcess
Process32Next
DeleteFileA
RemoveDirectoryA
GetVersion
GetCurrentProcess
WideCharToMultiByte
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
lstrcmpiA
DeleteCriticalSection
HeapDestroy
CopyFileA
Sleep
CreateMutexA
GetFileType
GetLastError

user32

InvalidateRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
MessageBeep
GetWindowRect
CharUpperA
PtInRect
UnhookWindowsHookEx
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
CharNextA
ExitWindowsEx
IsDialogMessageA
LoadIconA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
MessageBoxA
SetCursor
PostQuitMessage
WaitMessage
PeekMessageA
DispatchMessageA
PostMessageA
EnableWindow
KillTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
GetSysColorBrush
GetWindowPlacement
GetSystemMenu
AppendMenuA
DrawFocusRect
DefDlgProcA
IsWindowUnicode
SetTimer
SendMessageA
GetClassNameA
GetDesktopWindow
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
ScreenToClient
UpdateWindow
SendDlgItemMessageA
SetMenuItemBitmaps
MapWindowPoints
GetSysColor
SetFocus
wsprintfA
AdjustWindowRectEx

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
OleIsCurrentClipboard
CoRegisterMessageFilter
OleFlushClipboard

olepro32

ord253

oleaut32

SysAllocStringLen
LoadTypeLi
SysAllocString
SysFreeString
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocStringByteLen
SysStringLen
RegisterTypeLi

wsock32

WSAGetLastError
WSAStartup
WSACleanup
WSASetLastError
connect
sendto
recvfrom
socket
inet_ntoa
WSAAsyncSelect
send
recv
gethostbyname
closesocket
htonl
htons
bind
ioctlsocket
accept
listen

Sections

.text
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2dbf5a33fb24cd163afa72056c04928

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 160KB - Virtual size: 156KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 160KB - Virtual size: 156KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 16KB - Virtual size: 14KB