b67b7aa7734f8204a7760ed041cdea05f7741a2de96d98db534c4d3c6c7dcbbd

Sharing

Copy URL Twitter E-mail

General

Target

b67b7aa7734f8204a7760ed041cdea05f7741a2de96d98db534c4d3c6c7dcbbd
Size

340KB
MD5

74cc71de0234b7ceec06feb97d4c495a
SHA1

0de4fe56cfdeb5e15a2a09edf80bbe2c33f525e9
SHA256

b67b7aa7734f8204a7760ed041cdea05f7741a2de96d98db534c4d3c6c7dcbbd
SHA512

8979f95ac4a5408b02bf14097e2ab347a6fd816fd14a7167be62f33e8b3a7f71df3da5766c642d352005e773e38f4e2a142ae95ef0e133a0b96f41dea23942a2
SSDEEP

6144:Q2yF2OKzPP/jCSdkza2N8xECqWERAoZFI8nctoyWNJQR:QAzP2mn2N8kRlZFI8nw/WNaR

Score

N/A

Malware Config

Signatures

Files

b67b7aa7734f8204a7760ed041cdea05f7741a2de96d98db534c4d3c6c7dcbbd
.exe windows x86

a54c99f49d2ef9b19328cc98aaa80b1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AllocateAndInitializeSid
CopySid
FreeSid
GetLengthSid
GetTokenInformation
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
InitializeSecurityDescriptor
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegisterTraceGuidsW
SetSecurityDescriptorDacl
TraceEvent
UnregisterTraceGuids

shell32

CommandLineToArgvW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetFolderPathW
SHFileOperationW
DragQueryFileW
DragFinish

crypt32

CertAddCertificateContextToStore
CertAddEncodedCertificateToStore
CertAddSerializedElementToStore
CertCloseStore
CertDuplicateCertificateContext
CertFindChainInStore
CryptHashCertificate
CryptDecodeObjectEx
CertVerifyCertificateChainPolicy
CertSerializeCertificateStoreElement
CertOpenSystemStoreW
CertOpenStore
CertNameToStrW
CertGetCertificateChain
CertFreeCertificateContext
CertFreeCertificateChain
CertFindExtension

comctl32

InitCommonControlsEx

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ole32

RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
OleUninitialize
CoCreateGuid
CoCreateInstance
StringFromGUID2
CoInitialize
CoUninitialize
OleInitialize

gdi32

StrokeAndFillPath
StartPage
StartDocW
SetWorldTransform
SetTextColor
SetStretchBltMode
SetRectRgn
SetROP2
SetPolyFillMode
SetMiterLimit
SetGraphicsMode
SetDIBits
SetDCPenColor
SetDCBrushColor
SetBrushOrgEx
SetBkMode
SetBkColor
SetArcDirection
SetAbortProc
SelectObject
SelectClipRgn
SaveDC
RestoreDC
RemoveFontMemResourceEx
StrokePath
StretchDIBits
Rectangle
PolyBezier
PathToRegion
GetTextMetricsW
GetTextFaceW
GetTextColor
GetStretchBltMode
GetStockObject
GetOutlineTextMetricsW
GetObjectW
GetGlyphOutlineW
GetGlyphIndicesW
GetFontUnicodeRanges
GetFontData
GetDeviceCaps
AbortPath
AddFontMemResourceEx
BeginPath
BitBlt
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DeleteDC
DeleteObject
EndDoc
EndPage
EndPath
EnumFontFamiliesExW
ExtCreatePen
ExtTextOutW
GdiFlush
GetCharWidthI
GetCurrentObject

ws2_32

select
recvfrom
recv
ntohs
ntohl
listen
ioctlsocket
inet_ntoa
inet_addr
htons
htonl
getsockopt
getsockname
getservbyport
getservbyname
getpeername
gethostname
send
gethostbyaddr
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
WSASocketW
WSASetLastError
WSASend
WSAResetEvent
WSARecv
WSAGetOverlappedResult
WSAGetLastError
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSACleanup
sendto
setsockopt
shutdown
socket
gethostbyname

comdlg32

PrintDlgExW
GetSaveFileNameW

user32

SystemParametersInfoW
SetWindowsHookExW
SetWindowRgn
SetWindowPos
SetWindowLongW
SetWindowLongA
SetTimer
SetPropW
SetParent
SetFocus
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SendInput
ScrollDC
ScreenToClient
RemovePropW
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassExW
RedrawWindow
RealGetWindowClassW
PostQuitMessage
PostMessageW
PeekMessageW
OpenClipboard
MsgWaitForMultipleObjectsEx
MonitorFromWindow
MessageBoxW
MessageBeep
MapWindowPoints
LoadKeyboardLayoutW
LoadImageW
LoadCursorW
KillTimer
TrackMouseEvent
IsClipboardFormatAvailable
InvertRect
InvalidateRect
InsertMenuItemW
InflateRect
GetWindowThreadProcessId
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetQueueStatus
GetPropW
GetParent
GetMonitorInfoW
GetMessageTime
GetKeyboardLayout
GetKeyState
GetGuiResources
GetForegroundWindow
GetFocus
GetCursor
GetClipboardData
GetClassNameW
GetCaretBlinkTime
GetAsyncKeyState
FrameRect
FillRect
EnumThreadWindows
EnumDisplaySettingsW
EnumDisplayMonitors
EmptyClipboard
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyIcon
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreatePopupMenu
CreateIconIndirect
CloseClipboard
CallWindowProcW
CallNextHookEx
CallMsgFilterW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
WaitMessage
IsWindow
GetDC

shlwapi

PathFindExtensionW
PathFindFileNameW
PathFileExistsA
PathGetCharTypeW
PathIsUNCA
PathIsUNCW
PathRemoveExtensionW
UrlCreateFromPathA
UrlCreateFromPathW
PathFileExistsW

kernel32

SetFileAttributesA
SetFilePointer
SetFilePointerEx
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
UnregisterWaitEx
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrcmpiA
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
SetEvent
SetEnvironmentVariableA
SetEndOfFile
SetCurrentDirectoryW
RtlUnwind
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
RegisterWaitForSingleObject
ReadFile
RaiseException
QueueUserWorkItem
QueryPerformanceFrequency
QueryPerformanceCounter
PostQueuedCompletionStatus
PeekNamedPipe
OutputDebugStringA
OpenThread
MultiByteToWideChar
MoveFileExW
MoveFileA
MapViewOfFile
LockResource
LockFileEx
LockFile
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
IsBadWritePtr
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
GlobalMemoryStatusEx
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationA
GetVersionExW
GetVersionExA
GetUserDefaultLangID
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
GetTickCount
GetThreadTimes
GetThreadLocale
GetThreadContext
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDirectoryA
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetQueuedCompletionStatus
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetOEMCP
GetNumberFormatW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLongPathNameW
GetLogicalDrives
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileSizeEx
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetEnvironmentStringsW
GetEnvironmentStringsA
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDiskFreeSpaceA
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrencyFormatW
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetComputerNameA
GetCommandLineW
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FormatMessageA
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesA
EnterCriticalSection
DuplicateHandle
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateSemaphoreA
CreateProcessW
CreateMutexW
AreFileApisANSI
CancelIo
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateIoCompletionPort

winspool.drv

GetPrinterW
OpenPrinterW
ClosePrinter
ord203

Exports

Exports

cef_browser_create
cef_browser_create_sync
cef_bsupports_mime_type
cef_clear_htmlcache
cef_delete_all_cookies
cef_delete_cookie
cef_do_message_loop_work
cef_initialize
cef_post_data_create
cef_post_data_element_create
cef_register_extension
cef_register_plugin
cef_register_scheme
cef_request_create
cef_set_cookie
cef_shutdown
cef_stream_reader_create_for_data
cef_stream_reader_create_for_file
cef_stream_reader_create_for_handler
cef_stream_writer_create_for_file
cef_stream_writer_create_for_handler
cef_string_alloc
cef_string_alloc_length
cef_string_free
cef_string_length
cef_string_list_alloc
cef_string_list_append
cef_string_list_clear
cef_string_list_free
cef_string_list_size
cef_string_list_value
cef_string_map_alloc
cef_string_map_append
cef_string_map_clear
cef_string_map_find
cef_string_map_free
cef_string_map_key
cef_string_map_size
cef_string_map_value
cef_string_realloc
cef_string_realloc_length
cef_v8value_create_array
cef_v8value_create_bool
cef_v8value_create_double
cef_v8value_create_function
cef_v8value_create_int
cef_v8value_create_null
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_undefined

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a54c99f49d2ef9b19328cc98aaa80b1d

Headers

File Characteristics

Imports

advapi32

shell32

crypt32

comctl32

version

ole32

gdi32

ws2_32

comdlg32

user32

shlwapi

kernel32

winspool.drv

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 116KB - Virtual size: 116KB

.data Size: 80KB - Virtual size: 1.7MB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 116KB - Virtual size: 116KB

.data
Size: 80KB - Virtual size: 1.7MB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 20KB - Virtual size: 20KB