d800ef37896b4999a59ea46c1111aeaff8a9c4d07c2f9c9c061a3595b4b65fb5

Sharing

Copy URL Twitter E-mail

General

Target

d800ef37896b4999a59ea46c1111aeaff8a9c4d07c2f9c9c061a3595b4b65fb5
Size

460KB
MD5

d52360457febe7dc83a42d4a092b2adb
SHA1

073faf75dffaaa0cc10ecd4f359e91a8320ec14e
SHA256

d800ef37896b4999a59ea46c1111aeaff8a9c4d07c2f9c9c061a3595b4b65fb5
SHA512

0f668e6a982d390a6457073f99fc3aa3b0d85185d75e545680df39dc4a3c956b168327b34b576de1f319029aebd409a18189141f1918f70b5bb8a5dfffddbee2
SSDEEP

12288:WplzOYqiNB8WeGdrqnu1wm5oMJWp6vxu:WnOLiNyW3+u1TSMJWpV

Score

N/A

Malware Config

Signatures

Files

d800ef37896b4999a59ea46c1111aeaff8a9c4d07c2f9c9c061a3595b4b65fb5
.exe windows x86

eb92d231a58969fdf08d5d49be1f285b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cli_lp

SetActivationModeLP
StorePhoneActivationCodeLP
StorePhoneActivationCode1LP
SetLicenseTypeLP
ShowPackageInformationLP
SetProductInfo1LP
SetProductInfo2LP
SetMessagesHeaderLP
LPEndApplication
EraseLicenseLP
SetAutoValidateLP
SetMessagesFileName
GetModeLP
ActivateLP
SetProductVersionIdLP
GetDaysLeftLP
LPIsExpired
GetActivationModeLP
GetPINActivationCodeLP
GetLicenseTypeLP
Reactivate1LP
Reactivate2LP
Reactivate3LP
CheckInternetConnectionLP
SetLicenseFilePathLP
SetKeyFilePathLP
GetLicenseProductInfoLP
GetLicenseModuleInfoLP
SetTrialDaysLP
SetActivationServiceURL
ActivateWithDialogLP
ActivateWithTrialDialogsLP
SetModeLP
GetAutoValidateLP
LPIsActivated
IsOnlineActivatedLP
SetMainWindow
ValidateLicenseLP
LoadStringLP
Activate1LP
GetMessagesHeaderLP

kernel32

SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GlobalFlags
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
GetCurrentDirectoryA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
SetCurrentDirectoryA
SetEnvironmentVariableA
GetDriveTypeA
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
SetStdHandle
GetFileType
HeapSize
UnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetACP
HeapDestroy
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
GetLastError
ExitThread
TerminateProcess
SleepEx
Sleep
CloseHandle
ExitProcess
DeleteFileA
GetExitCodeProcess
WaitForSingleObject
CreateThread
CreateProcessA
GetModuleFileNameA
GetModuleHandleA
CreateFileA
GetTempFileNameA
GetTempPathA
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsA
InterlockedExchange
GetVersion
CompareStringA
CompareStringW
lstrlenA
SetUnhandledExceptionFilter
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
GetVersionExA
FreeResource
GetProcAddress
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LoadLibraryA
MoveFileA
GetCurrentProcessId
GetCurrentThreadId
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv

user32

GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
UnregisterClassA
LoadCursorA
GetSysColorBrush
CharNextA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
InvalidateRgn
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowTextA
GetFocus
SetWindowPos
SetFocus
MoveWindow
GetWindowThreadProcessId
MessageBoxA
IsWindow
EnumWindows
ShowWindow
EnableWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
ReleaseCapture
SetCapture
UnhookWindowsHookEx
DestroyMenu
DrawIcon
SendMessageA
IsIconic
GetClientRect
LoadIconA
GetSystemMetrics
CharUpperA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
GetWindow
RegisterClassA

gdi32

SetMapMode
DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromProgID

oleaut32

VariantClear
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantChangeType
VariantInit
OleCreateFontIndirect
SysAllocString
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
SysAllocStringLen

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb92d231a58969fdf08d5d49be1f285b

Headers

File Characteristics

Imports

cli_lp

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 248KB - Virtual size: 244KB

.rdata Size: 64KB - Virtual size: 61KB

.data Size: 24KB - Virtual size: 38KB

.rsrc Size: 120KB - Virtual size: 116KB

.text
Size: 248KB - Virtual size: 244KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 24KB - Virtual size: 38KB

.rsrc
Size: 120KB - Virtual size: 116KB