324cbf5ce04bacdd59f94ebe02e4913d3c561403c40ee95126f3fd7a3d855821

Sharing

Copy URL Twitter E-mail

General

Target

324cbf5ce04bacdd59f94ebe02e4913d3c561403c40ee95126f3fd7a3d855821
Size

568KB
MD5

f441c0c31c0626754cba641fbbc4e47e
SHA1

730bb80e9e376e88fe9f73e7fb0212be06593470
SHA256

324cbf5ce04bacdd59f94ebe02e4913d3c561403c40ee95126f3fd7a3d855821
SHA512

25dcc0412a2b27a36db023d7794d295afca997dcd3be175306ca935c8f99dfd78e6f7f5bde897c22828a5e6abdfc774a08da2b94226cc7432ce49c87f01fea83
SSDEEP

12288:y5lN9tm5aQWZnSuUrN8NEaZSpZs3AuUShhJWgGjNbluaTuDCJnFQR3hWgori8+Tm:WlN9tm5mlQVPtTuDqyRih+T/G/

Score

N/A

Malware Config

Signatures

Files

324cbf5ce04bacdd59f94ebe02e4913d3c561403c40ee95126f3fd7a3d855821
.exe windows x86

5a91f80aac1d55b154337ea4e886f74c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
GetFileInformationByHandle
ExitThread
CreateThread
GlobalFlags
RtlUnwind
RaiseException
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetConsoleCP
GetConsoleMode
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetStdHandle
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetThreadLocale
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
LocalFree
MulDiv
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalAddAtomA
FreeResource
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
FormatMessageA
ExpandEnvironmentStringsA
GetTickCount
Sleep
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
ReadFile
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
FreeLibrary
SetLastError
SleepEx
GetVersion
GetLastError
CompareStringA
CompareStringW
InterlockedExchange
CreateFileA
MoveFileExA
lstrlenA
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GetPrivateProfileIntA
GetCurrentDirectoryA
WaitForSingleObject
CreateProcessA
MultiByteToWideChar
LockResource
SizeofResource
FindResourceA
FindClose
FindNextFileA
WritePrivateProfileStringA
DeleteFileA
GetPrivateProfileStringA
FindFirstFileA
CopyFileA
SetFileAttributesA
GetModuleFileNameA
MoveFileA
GetSystemDirectoryA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
CloseHandle
WideCharToMultiByte
OpenProcess
GetModuleHandleA
GetProcAddress
LoadResource
GetDriveTypeA

user32

RegisterClipboardFormatA
PostThreadMessageA
GetSysColorBrush
CharNextA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
SetWindowsHookExA
CallNextHookEx
GetActiveWindow
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
UnregisterClassA
DestroyMenu
MessageBeep
GetNextDlgGroupItem
ReleaseCapture
CheckMenuItem
PostQuitMessage
SetCapture
InvalidateRgn
SetRect
IsRectEmpty
GetLastActivePopup
CopyAcceleratorTableA
CharUpperA
KillTimer
MessageBoxA
GetParent
TabbedTextOutA
WindowFromPoint
ClientToScreen
IsWindow
GrayStringA
EqualRect
DrawTextExA
GetWindowRect
DrawTextA
InvalidateRect
GetClientRect
PostMessageA
IsWindowVisible
DrawIcon
LoadIconA
GetSystemMetrics
EnableWindow
SendMessageA
LoadCursorA
SetCursor
IsIconic
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
GetMenu

gdi32

SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
DeleteObject
ScaleViewportExtEx
OffsetViewportOrgEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetMapMode
DPtoLP
GetRgnBox
SetViewportExtEx
SetViewportOrgEx
SelectObject
GetWindowExtEx
GetViewportExtEx
PtVisible
BitBlt
Escape
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetTextExtentPoint32A
CreateFontIndirectA
GetObjectA
ExtTextOutA
TextOutA
RectVisible

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
Shell_NotifyIconA
ShellExecuteA

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc
CoRegisterMessageFilter
CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

VariantCopy
SysAllocString
SafeArrayDestroy
SysAllocStringByteLen
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString

gdiplus

GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipDrawImageI
GdipAlloc
GdipFree
GdipDrawImageRectRect
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipCreateFromHDC
GdipCloneImage
GdipDisposeImage
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream

ws2_32

listen
accept
recvfrom
sendto
__WSAFDIsSet
WSASetLastError
getservbyport
gethostbyaddr
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
socket
connect
setsockopt
getsockopt
select
ioctlsocket
bind
ntohs
getsockname
send
recv
WSAGetLastError
closesocket
WSAStartup
WSACleanup
gethostname
htons

wldap32

ord60
ord50
ord26
ord30
ord32
ord35
ord143
ord200
ord33
ord301
ord27
ord41
ord46
ord211
ord22
ord79

Sections

.text
Size: 388KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a91f80aac1d55b154337ea4e886f74c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

ws2_32

wldap32

Sections

.text Size: 388KB - Virtual size: 386KB

.rdata Size: 88KB - Virtual size: 84KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 76KB - Virtual size: 73KB

.text
Size: 388KB - Virtual size: 386KB

.rdata
Size: 88KB - Virtual size: 84KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 76KB - Virtual size: 73KB