f6729e6bfe2395b592b14eee6a62316383cbac3b6d9cd3e3d77076e7f1e9b5bf

Sharing

Copy URL Twitter E-mail

General

Target

f6729e6bfe2395b592b14eee6a62316383cbac3b6d9cd3e3d77076e7f1e9b5bf
Size

484KB
MD5

00ba51bbe98ef607fcc22164d4066f78
SHA1

cd812490903a832ebf57ad26c06803ab41baa844
SHA256

f6729e6bfe2395b592b14eee6a62316383cbac3b6d9cd3e3d77076e7f1e9b5bf
SHA512

e57f1a6439158f7a55f1daed757718088c69cf66ebd97b259a8cb8b9352da38631296bca80f01205afe3d9deb5fbb0d0b8488bec24363d7f9961275e51c6750c
SSDEEP

6144:bY3kdoe+KCYxNLWig9h4IvWfjkrbGwbzZN62vAun9K5uqDBef9+0OK3lFfzwgELC:WS3xNMD4IefYrbfvZjqnDBw9+U33cS

Score

N/A

Malware Config

Signatures

Files

f6729e6bfe2395b592b14eee6a62316383cbac3b6d9cd3e3d77076e7f1e9b5bf
.exe windows x86

332ba9f9398278e601bcff7a57070283

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetAddConnection2W
WNetCancelConnection2W

advapi32

RegQueryValueExA
RegSetValueExW
RegOpenKeyExW
ImpersonateLoggedOnUser
LogonUserW
RegCloseKey
RegCreateKeyExW
RevertToSelf
RegQueryValueExW
RegCreateKeyW
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyA

cgiresutf8

cgi_GetUnicodeString

kernel32

LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
WritePrivateProfileStringW
GlobalFlags
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
LocalAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
HeapReAlloc
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
LCMapStringA
LCMapStringW
CreateFileA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
InterlockedIncrement
GlobalGetAtomNameW
GetModuleHandleA
GlobalFindAtomW
CompareStringW
GetVersionExA
InterlockedDecrement
FreeResource
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
CompareStringA
InterlockedExchange
lstrcmpW
GetModuleHandleW
SetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
GetComputerNameA
WaitNamedPipeW
SetNamedPipeHandleState
WriteFile
WaitForSingleObject
SetWaitableTimer
GetOverlappedResult
ReadFile
CreateWaitableTimerW
CreateNamedPipeW
Sleep
DisconnectNamedPipe
ConnectNamedPipe
SetEvent
InterlockedCompareExchange
GetCurrentProcessId
lstrlenA
GetPrivateProfileStringA
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
GetThreadLocale
GetTickCount
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
CreateThread
CreateEventW
WaitForMultipleObjects
TerminateThread
GetExitCodeThread
RemoveDirectoryW
DeleteFileW
GetComputerNameW
CreateFileW
GetLocalTime
lstrlenW
FindResourceW
LoadResource
LockResource
SizeofResource
GetWindowsDirectoryW
lstrcpyW
CreateMutexW
GetCommandLineW
GlobalFree
ReleaseMutex
CloseHandle
CreateDirectoryW
GetLastError
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
GetModuleFileNameW
TerminateProcess

user32

SetCapture
CharUpperW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
BringWindowToTop
SetMenu
TranslateAcceleratorW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextW
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
PtInRect
GetDlgCtrlID
DefWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
CopyRect
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
LoadCursorW
GetSysColorBrush
UnpackDDElParam
ReuseDDElParam
LoadMenuW
ReleaseCapture
LoadAcceleratorsW
InvalidateRect
InsertMenuItemW
CreatePopupMenu
WinHelpW
SetRectEmpty
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBeep
SetWindowLongW
CallWindowProcW
GetWindowRect
GetSystemMetrics
LoadIconW
EnableWindow
GetParent
GetClientRect
IsIconic
SendMessageW
wsprintfW
GetSysColor
UnregisterClassA

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
ScaleViewportExtEx
CreateSolidBrush
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
CreateCompatibleBitmap
GetDeviceCaps
GetPixel
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32W
ExtTextOutW
BitBlt
CreateCompatibleDC
CreateFontIndirectW
GetObjectW
CreateBitmap
PtVisible

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

shell32

DragQueryFileW
DragFinish
CommandLineToArgvW

oledlg

OleUIBusyW

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromProgID

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

Sections

.text
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

332ba9f9398278e601bcff7a57070283

Headers

File Characteristics

Imports

mpr

advapi32

cgiresutf8

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

oledlg

ole32

oleaut32

shlwapi

Sections

.text Size: 300KB - Virtual size: 297KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 36KB - Virtual size: 54KB

.rsrc Size: 68KB - Virtual size: 68KB

.text
Size: 300KB - Virtual size: 297KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 36KB - Virtual size: 54KB

.rsrc
Size: 68KB - Virtual size: 68KB