9aaa709af6ea5afca089ba7b36c9c172d1a587304cb57b8e550323ab0944a0a9

Sharing

Copy URL

Twitter E-mail

General

Target

9aaa709af6ea5afca089ba7b36c9c172d1a587304cb57b8e550323ab0944a0a9
Size

284KB
MD5

5ac3a7650c9ed5efad2388f3615a7a46
SHA1

0641f00c4aeaba7a95ccb64ac7bff17c00dec2ec
SHA256

9aaa709af6ea5afca089ba7b36c9c172d1a587304cb57b8e550323ab0944a0a9
SHA512

8a18234557806bcb59b46ca0b2c2adf85d43a09f32353e6a1466f6c4485a90a248bd49290ab021cbd4821128b803318bf9d16a49f0c5eaf2959ec4d303b0be69
SSDEEP

6144:eKToFk0L+kFcLPCXyfVp7H7gj59JwHCNA9:eKcFk0LTczCKprLHCy9

Score

N/A

Malware Config

Signatures

Files

9aaa709af6ea5afca089ba7b36c9c172d1a587304cb57b8e550323ab0944a0a9
.exe windows x86

0b01b7cc055ef3c0902cb00d243a4eb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasEnumConnectionsA
RasEnumDevicesA
RasDeleteEntryA
RasSetEntryPropertiesA
RasDialA
RasGetErrorStringA
RasHangUpA
RasGetConnectStatusA

kernel32

GetFileAttributesA
GetFileSize
GetFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetErrorMode
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetShortPathNameA
GetFullPathNameA
GetProfileStringA
Sleep
lstrcpyA
HeapFree
HeapAlloc
GetProcessHeap
GlobalFree
GlobalAlloc
InterlockedDecrement
InterlockedIncrement
lstrcmpiA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
lstrcpynA
GetCurrentThreadId
GetCurrentThread
lstrcmpA
GlobalDeleteAtom
GlobalLock
GetModuleFileNameA
CloseHandle
LoadResource
FindResourceA
LockResource
GlobalUnlock
GetTickCount
GetProcAddress
GetModuleHandleA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FormatMessageA
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
WritePrivateProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
GetLastError
GlobalFlags
GetProcessVersion
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA

user32

CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
InvalidateRect
InflateRect
DestroyIcon
GetDesktopWindow
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
DestroyMenu
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
MoveWindow
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
PostThreadMessageA
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SetWindowTextA
SendMessageA
LoadIconA
SetFocus
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
RegisterClipboardFormatA
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
CopyRect
GetMessageA
TranslateMessage
DrawFocusRect
DefDlgProcA
IsWindowUnicode
SetTimer
GetDlgItem
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
KillTimer
ShowWindow
MessageBoxA
EnableWindow
GetNextDlgTabItem
GetParent
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
UnhookWindowsHookEx
PostMessageA
PostQuitMessage
SetCursor
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
SetWindowsHookExA
GetCursorPos
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetBkMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateFontA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

shell32

ExtractIconA
ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoGetClassObject
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter

olepro32

ord253

oleaut32

VariantCopy
VariantClear
VariantChangeType
SysAllocStringLen
SysFreeString
SysAllocString
SysStringByteLen
SysStringLen
VariantTimeToSystemTime
SysAllocStringByteLen
LoadTypeLi

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b01b7cc055ef3c0902cb00d243a4eb1

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 144KB - Virtual size: 142KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 84KB - Virtual size: 100KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 144KB - Virtual size: 142KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 84KB - Virtual size: 100KB

.rsrc
Size: 16KB - Virtual size: 14KB