a58443ac83f974dfb590060ef7f5da6bb0459f6d3c19cc26cfe07a2109d720f6

Sharing

Copy URL Twitter E-mail

General

Target

a58443ac83f974dfb590060ef7f5da6bb0459f6d3c19cc26cfe07a2109d720f6
Size

973KB
MD5

0afb471fa38b7c8c6acfcd659a9b362f
SHA1

7095f7bade0f0410f2a53601e5ea7b2fbca2c48c
SHA256

a58443ac83f974dfb590060ef7f5da6bb0459f6d3c19cc26cfe07a2109d720f6
SHA512

7197b6ecbbd56832ff0010a3fcd6a39ba70f783ddb2c2cbfef086b9b8189c793eba940114ce85eb4bf7116efeebf71630d3314a7fe7d8e0643225a18f448e32d
SSDEEP

24576:Cxj43HuVBmm0tQfQ5CNdCyyFRF3eODFn:8cJifCFRF33DF

Score

N/A

Malware Config

Signatures

Files

a58443ac83f974dfb590060ef7f5da6bb0459f6d3c19cc26cfe07a2109d720f6
.exe windows x86

7ea91f5e5ceb023e2b7bc6753d8b0340

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

dmtmdl

ord113
ord217
ord160
ord164
ord155
ord117
ord161
ord156
ord153
ord152
MIgeotable_RemoveGeosetName
ord146
ord142
ord149
ord151
ord157
ord144
ord147
ord163
ord201
ord143
ord133
ord136
ord129
ord128
ord127
ord134
ord131
ord132
ord130
ord137
ord170
ord169
ord145
ord214
ord141
ord205
ord204
ord199
ord211
ord150
ord158
ord197
ord124
ord198
ord125
ord118
ord121
ord106
ord178
ord177
ord182
ord179
ord181
ord180
MINativeToLatLong
MILatLongToNative
ord109
ord101
ord110
ord167
ord210
ord123
ord165
ord140
MIgeomatch_FetchKey
ord203
ord175
ord111
ord114
ord196
MISetSearchPaths
MIDeleteColumn
MINameDataColumn
ord183
ord224
ord209
ord168
ord108
ord171
ord207
ord176
ord102
ord227
ord159
ord115
ord166
ord226
ord104
ord120
ord105
ord212
ord119
ord213

kernel32

GetFileType
GetStdHandle
GetEnvironmentStringsW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringA
SetHandleCount
GetTimeZoneInformation
LCMapStringW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedIncrement
GetTempPathA
_lopen
SetFilePointer
FreeEnvironmentStringsW
lstrlenA
lstrcpyA
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetModuleFileNameA
LoadLibraryA
FindResourceA
LoadResource
FreeLibrary
GetVersionExA
GetLocaleInfoA
GetUserDefaultLCID
GetSystemDefaultLCID
GetNumberFormatA
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
GetProfileStringA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
HeapCreate
HeapReAlloc
HeapSize
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
RaiseException
FindNextFileA
HeapFree
GetOEMCP
GetCPInfo
RtlUnwind
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
SetErrorMode
GetCurrentDirectoryA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
FlushFileBuffers
SetEndOfFile
_lclose
CreateFileA
WriteFile
ReadFile
GetProcAddress
GetCurrentProcess
DuplicateHandle
GetDiskFreeSpaceA
GlobalSize
GlobalGetAtomNameA
GetFileTime
GetFullPathNameA
GetTempFileNameA
WritePrivateProfileStringA
SetFileTime
GetFileAttributesA
GetModuleHandleA
GetPrivateProfileStringA
GetPrivateProfileIntA
LocalReAlloc
GetLastError
SetLastError
GlobalReAlloc
TlsSetValue
TlsGetValue
TlsAlloc
GlobalHandle
GlobalAddAtomA
LocalAlloc
SizeofResource
GetTickCount
CreateEventA
WaitForSingleObject
GlobalDeleteAtom
CloseHandle
SetEvent
FileTimeToLocalFileTime
GetCurrentThread
GetProfileIntA
GetProcessVersion
FileTimeToSystemTime
GetVersion
FormatMessageA
lstrcpynA
lstrcmpiA
MultiByteToWideChar
LocalFree
lstrcmpA
GetCurrentThreadId
InterlockedDecrement
lstrcatA
MulDiv
LockResource
WideCharToMultiByte
_llseek
GetACP
_lread
LockFile
UnlockFile
MoveFileA

user32

GetAsyncKeyState
LoadStringA
ShowOwnedPopups
PostQuitMessage
SetMessageQueue
ValidateRect
LoadAcceleratorsA
DestroyMenu
InSendMessage
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
IsIconic
BringWindowToTop
InvertRect
GetSystemMenu
WaitMessage
GetWindowThreadProcessId
PostThreadMessageA
CopyAcceleratorTableA
CreateMenu
ClipCursor
IsZoomed
InsertMenuA
GetMenuStringA
RemoveMenu
DestroyIcon
LockWindowUpdate
SetScrollRange
SetScrollPos
GetTopWindow
GetScrollInfo
DrawTextA
GrayStringA
RegisterClassA
GetClassInfoA
GetMenuItemID
GetMenu
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
CreateWindowExA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetPropA
GetLastActivePopup
GetPropA
RemovePropA
CallWindowProcA
GetMessageTime
GetMessagePos
GetWindow
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetDialogBaseUnits
IsRectEmpty
SetRectEmpty
BeginDeferWindowPos
GetDlgCtrlID
EndDeferWindowPos
ShowCursor
WindowFromPoint
CheckMenuItem
EqualRect
LoadIconA
wsprintfA
GetMenuItemCount
SetParent
DeleteMenu
GetMenuCheckMarkDimensions
GetWindowDC
EndPaint
GetCursor
SetCursorPos
SystemParametersInfoA
SetWindowLongA
GetActiveWindow
SetActiveWindow
MoveWindow
SetWindowTextA
GetDlgItem
ShowWindow
GetClassNameA
SetFocus
GetForegroundWindow
IsWindowVisible
IsWindowEnabled
SetForegroundWindow
PeekMessageA
TranslateMessage
MessageBoxA
LoadBitmapA
DestroyCursor
RegisterWindowMessageA
GetTabbedTextExtentA
TabbedTextOutA
GetSystemMetrics
SetWindowPos
GetFocus
IsChild
ClientToScreen
InvalidateRect
MapDialogRect
FrameRect
MessageBeep
GetDesktopWindow
UpdateWindow
InflateRect
SetRect
GetParent
PostMessageA
GetDC
ReleaseDC
GetClientRect
GetWindowRect
IsWindow
GetCursorPos
SetTimer
KillTimer
ScreenToClient
ChildWindowFromPointEx
GetWindowLongA
WinHelpA
SendMessageA
CreateCaret
CharUpperA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
IsDialogMessageA
SetDlgItemTextA
ShowCaret
HideCaret
DestroyCaret
GetCapture
SetCapture
GetMessageA
DispatchMessageA
ReleaseCapture
CopyRect
FillRect
GetSysColor
SetCaretPos
RegisterClipboardFormatA
IntersectRect
BeginPaint
AppendMenuA
LoadMenuA
OffsetRect
GetDCEx
CheckRadioButton
PtInRect
SetCursor
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetKeyState
UnionRect
RedrawWindow
LoadCursorA
EnableWindow
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
DeferWindowPos
SetScrollInfo
GetScrollRange
GetSubMenu
EnableMenuItem
ShowScrollBar
DrawFocusRect
GetNextDlgTabItem
DefDlgProcA
CharNextA
ExcludeUpdateRgn
UnregisterClassA
IsWindowUnicode

gdi32

CreateDIBitmap
GetNearestColor
CreateFontIndirectA
SetTextColor
SetBkColor
DeleteDC
CreateCompatibleDC
CreateBitmap
BitBlt
Rectangle
GetBkColor
SelectObject
CreateRectRgnIndirect
PatBlt
GetTextColor
GetStockObject
GetObjectType
CreatePatternBrush
DeleteObject
CreateCompatibleBitmap
GetTextExtentPoint32A
GetWindowOrgEx
CreatePen
TextOutA
StretchBlt
DeleteMetaFile
GetTextMetricsA
SetMetaFileBitsEx
SetTextAlign
GetMetaFileA
ExtTextOutA
GetViewportExtEx
SetBkMode
GetViewportOrgEx
GetMapMode
GetWindowExtEx
GetBitmapDimensionEx
CreateDCA
SetBitmapDimensionEx
SaveDC
GetTextAlign
RestoreDC
SetStretchBltMode
SetMapMode
SetROP2
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
GetObjectA
DPtoLP
LPtoDP
GetCurrentPositionEx
GetTextExtentPointA
CreateSolidBrush
CreateRectRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
GetDeviceCaps
PtVisible
RectVisible
Escape
CombineRgn
SetRectRgn
UnrealizeObject
StretchDIBits
SetBrushOrgEx
CloseMetaFile
CreateMetaFileA
CopyMetaFileA

comdlg32

ChooseFontA
PrintDlgA
GetFileTitleA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueA
GetFileSecurityA
SetFileSecurityA
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegSetValueA

shell32

ExtractIconA
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA

comctl32

ImageList_Destroy
CreatePropertySheetPageA
DestroyPropertySheetPage
ord17
PropertySheetA

oledlg

ord8

ole32

OleCreateMenuDescriptor
RevokeDragDrop
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
ReleaseStgMedium
WriteClassStm
OleSaveToStream
CreateStreamOnHGlobal
CreateGenericComposite
CreateOleAdviseHolder
CreateDataAdviseHolder
OleDestroyMenuDescriptor
RegisterDragDrop
OleGetClipboard
CoRegisterMessageFilter
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
IsAccelerator
CreateBindCtx
OleDuplicateData
OleUninitialize
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
CoDisconnectObject
StgCreateDocfile
OleCreateLinkFromData
CoCreateInstance
StringFromCLSID
OleSetAutoConvert
CoGetClassObject
StgOpenStorage
OleRegGetUserType
OleIsRunning
OleRun
CreateItemMoniker
CoLockObjectExternal
OleTranslateAccelerator
CoFreeUnusedLibraries
StgIsStorageFile
WriteClassStg
GetRunningObjectTable
CreateFileMoniker
OleRegGetMiscStatus
CoTaskMemFree
OleRegEnumVerbs
CoTaskMemAlloc

oleaut32

SysFreeString
VariantClear
LoadTypeLi
VariantInit
VariantChangeType
SysAllocString
SysAllocStringByteLen
VariantCopy
GetActiveObject
SafeArrayGetElement
SysAllocStringLen
SysStringLen

Sections

.text
Size: 680KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7ea91f5e5ceb023e2b7bc6753d8b0340

Headers

File Characteristics

Imports

version

dmtmdl

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 680KB - Virtual size: 680KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 23KB - Virtual size: 40KB

.idata Size: 13KB - Virtual size: 13KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 116KB - Virtual size: 115KB

.text
Size: 680KB - Virtual size: 680KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 23KB - Virtual size: 40KB

.idata
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 116KB - Virtual size: 115KB