ed857653ca8ec99f0ebcc9102b04c881216800623e3a758d945bb8f13fb1f320

Sharing

Copy URL Twitter E-mail

General

Target

ed857653ca8ec99f0ebcc9102b04c881216800623e3a758d945bb8f13fb1f320
Size

1.3MB
MD5

c2a8b35353dc2de19b150e30f4ec11d9
SHA1

0b34fcea0b0e75983f581d7e77a4748450e23494
SHA256

ed857653ca8ec99f0ebcc9102b04c881216800623e3a758d945bb8f13fb1f320
SHA512

007bde30ad28f7f11892c84ba82b9ad931ba79e14e2d072fb3c47066aa09683dd0a042a28c9d2cb446e2bbe0c9e30ccb03dd9f37a395b0830891275b33350d9a
SSDEEP

24576:tRQv02DBeeM2sdtV9ErXqaVK9D1ZA7iNA/xeASQRAEySrfmM1DG:clVbMnditK9DHA7SA/wARAOe8G

Score

N/A

Malware Config

Signatures

Files

ed857653ca8ec99f0ebcc9102b04c881216800623e3a758d945bb8f13fb1f320
.exe windows x86

97747f2d9928561e6172a85e959fc878

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

inet_addr
gethostbyname
WSACleanup
socket
WSAStartup
htons
listen
bind
__WSAFDIsSet
select
connect
closesocket
ioctlsocket
recv
accept
send

gdi32

DeleteDC
GetStockObject
GetMapMode
SetMapMode
LPtoDP
GetDeviceCaps
DPtoLP
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
DeleteObject
ExtTextOutA
SaveDC
RestoreDC

wininet

InternetSetOptionA

kernel32

GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
GetFullPathNameA
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
GetFileAttributesA
lstrcmpW
GetCurrentDirectoryA
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapFree
GetDriveTypeA
VirtualAlloc
HeapReAlloc
HeapSize
GetACP
IsValidCodePage
GetTimeZoneInformation
VirtualFree
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
FileTimeToSystemTime
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
GetModuleHandleW
CompareStringA
GetCurrentThreadId
MultiByteToWideChar
lstrlenA
GetCurrentProcessId
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
SetLastError
FreeLibrary
GetEnvironmentVariableA
CreateMutexA
GetCommandLineA
TerminateThread
GetModuleFileNameA
CreateThread
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MoveFileA
Module32First
ResetEvent
CreateToolhelp32Snapshot
Process32First
CreateDirectoryA
OpenProcess
Process32Next
CopyFileA
CreateFileA
ReadFile
WriteFile
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
WaitForDebugEvent
TerminateProcess
GetThreadContext
SetThreadContext
ContinueDebugEvent
GetModuleHandleA
CreateEventA
CloseHandle
MulDiv
SetFileAttributesA
SetEvent
OutputDebugStringA
GetLocalTime
FormatMessageA
ReleaseMutex
WaitForSingleObject
GetLastError
CreateProcessA
GetTempPathA
Sleep
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
GetWindowsDirectoryA

user32

SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetClassInfoA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
EnableMenuItem
CheckMenuItem
GetWindowTextA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ClientToScreen
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
MessageBoxA
ShowWindow
GetTitleBarInfo
GetDesktopWindow
GetWindowRect
MoveWindow
SetWindowTextA
BeginPaint
EndPaint
InvalidateRect
UpdateWindow
SetFocus
GetWindowDC
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
CreateIconFromResourceEx
ModifyMenuA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
CreateServiceA
ChangeServiceConfig2A
StartServiceA
SetServiceStatus
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
ControlService
CloseServiceHandle

shell32

Shell_NotifyIconA

ole32

CreateStreamOnHGlobal

oleaut32

VariantInit
VariantChangeType
VariantClear
OleLoadPicture

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

97747f2d9928561e6172a85e959fc878

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

gdi32

wininet

kernel32

user32

winspool.drv

advapi32

shell32

ole32

oleaut32

oleacc

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 99KB - Virtual size: 174KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 99KB - Virtual size: 174KB