b00dc1034c1f339db2c4c1a06cad84cc0d3e8f850897fee570bb8cc0df905958

Sharing

Copy URL

Twitter E-mail

General

Target

b00dc1034c1f339db2c4c1a06cad84cc0d3e8f850897fee570bb8cc0df905958
Size

418KB
MD5

7dc17ca28cd045e5b4ecc6324a0eeb7b
SHA1

80f82d076016d07cb68822bb81291b2f17990a4f
SHA256

b00dc1034c1f339db2c4c1a06cad84cc0d3e8f850897fee570bb8cc0df905958
SHA512

e544c5e95461f2f0cf34283e84451214de2fa07e25d60e7a492e06333f5b58a2952f8dc9854df5c9878e759a49f83a5ce71280893a8b24a91f4441c79c2ccd69
SSDEEP

12288:1UbjpvVw7FlRNCq/knSujQRlBlDeK0k9p:6bdVMhS0nltp

Score

N/A

Malware Config

Signatures

Files

b00dc1034c1f339db2c4c1a06cad84cc0d3e8f850897fee570bb8cc0df905958
.exe windows x86

07f0e8cbe0c75e65eb05b089322fed55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetCancelConnection2A

gdi32

GetBkColor
Polyline
SetPixel
CreatePenIndirect
Ellipse
SetPixelFormat
FillRgn
GetTextExtentPoint32A
PatBlt
IntersectClipRect
GetTextExtentPointA
GetFontData
Rectangle
FillPath
CancelDC
CreateFontW
GetTextAlign
GetTextCharsetInfo
CopyEnhMetaFileW
GetDIBColorTable
GetObjectW
OffsetWindowOrgEx
GetObjectA
GetNearestPaletteIndex
GetCharWidthA
GdiFlush
ExtCreatePen
EnumMetaFile
ScaleViewportExtEx
DeleteEnhMetaFile
CreateFontIndirectA
Arc
PtVisible
SetPolyFillMode
SetWindowExtEx
MoveToEx
SetRectRgn
SetAbortProc
GetDeviceCaps
SaveDC
ExtFloodFill
OffsetRgn
GetRgnBox
CreateRoundRectRgn
CreateDCA
CreateBitmap
RealizePalette
OffsetViewportOrgEx
CreateRectRgn
OffsetClipRgn
GetGlyphOutlineW
GetDIBits
StartDocW
PlayEnhMetaFileRecord
GetPolyFillMode
LPtoDP
GetTextMetricsA
SetPixelV
DeleteDC
GetClipRgn
GetStockObject
UpdateColors
SetViewportExtEx
SetTextAlign

advapi32

SetKernelObjectSecurity
IsValidSid
CreateServiceA
SetSecurityDescriptorGroup
GetSecurityDescriptorOwner
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
FreeSid
ChangeServiceConfigA
LookupPrivilegeValueA
ChangeServiceConfig2A
InitializeSecurityDescriptor
QueryServiceStatus
OpenProcessToken
LsaQueryInformationPolicy
LookupPrivilegeValueW
GetAce
LogonUserA
OpenThreadToken
CreateServiceW
RevertToSelf
RegDeleteKeyA
CloseServiceHandle
AllocateAndInitializeSid
LsaFreeMemory
GetEffectiveRightsFromAclW
MakeSelfRelativeSD
GetLengthSid
RegSetValueA
GetSidSubAuthorityCount
RegSetValueExW
DecryptFileW
SetFileSecurityA
LookupAccountNameW
RegCloseKey
EnumServicesStatusA
GetTokenInformation

kernel32

GetStringTypeA
GetStartupInfoA
EnumResourceNamesW
GetConsoleTitleW
GetModuleHandleA

msvcrt

_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
_safe_fdivr
gets
_onexit
__dllonexit
_mbscpy
_ismbstrail
__getmainargs

version

VerInstallFileA
GetFileVersionInfoSizeW
VerFindFileA
VerQueryValueW
VerInstallFileW
VerQueryValueA
GetFileVersionInfoSizeA

user32

LoadBitmapA
CopyIcon
IsCharLowerA
CheckMenuItem
IsChild
TranslateMessage
MapVirtualKeyExW
SetCaretPos
SetWindowTextW
LoadMenuW
SetRectEmpty
GetUserObjectInformationW
IsWindowVisible
SetMenuDefaultItem
GetClipboardData
GetDlgCtrlID
CopyAcceleratorTableW
GetClassInfoA
SetKeyboardState
EnableWindow
GetDoubleClickTime
DrawStateW
GetProcessWindowStation
UnhookWinEvent
WindowFromPoint
GetSysColorBrush
ShowWindow
IsCharAlphaW
GetCaretPos
DestroyCaret
DrawTextExA
DialogBoxParamA
DestroyAcceleratorTable
InsertMenuW
ValidateRect
CreateDialogIndirectParamA
CreateCursor
SetFocus
CheckRadioButton
DrawTextA
CharUpperA
GetWindowWord
IntersectRect
MoveWindow
FindWindowA
InSendMessage
EnumThreadWindows
SetWindowPos
LoadCursorA
CloseDesktop
DrawIcon
DialogBoxIndirectParamA
CreateDialogParamA
ShowCaret
FillRect
DestroyMenu
GetWindowThreadProcessId
TranslateMDISysAccel
LoadIconA
GetDlgItemTextW
CharLowerBuffA
GetClassInfoW
SetTimer
PostThreadMessageA
RegisterWindowMessageA
GetWindowTextLengthA
InvalidateRect
SetClipboardData
ScrollWindowEx
ShowOwnedPopups
EnableScrollBar
GetMenuItemID
GetDlgItemTextA
SetMenu
CharLowerW
IsWindowEnabled
DdeConnect
WaitMessage
GetClassLongA
ClipCursor
FindWindowW
CharNextA
IsCharAlphaNumericA
PostMessageA
GetWindowLongW

netapi32

NetServerEnum

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 545KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07f0e8cbe0c75e65eb05b089322fed55

Headers

File Characteristics

Imports

mpr

gdi32

advapi32

kernel32

msvcrt

version

user32

netapi32

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 16KB - Virtual size: 545KB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 16KB - Virtual size: 545KB

.rsrc
Size: 68KB - Virtual size: 66KB