a899aecf6cb8291b375ebcee77a8ff4302f6d95c404789b9107eb89270ce454c

Sharing

Copy URL Twitter E-mail

General

Target

a899aecf6cb8291b375ebcee77a8ff4302f6d95c404789b9107eb89270ce454c
Size

368KB
MD5

59a4f167995520acea843051f7c01f9f
SHA1

58e712ae2b8d158856ace4c54c0425df1d77c8dd
SHA256

a899aecf6cb8291b375ebcee77a8ff4302f6d95c404789b9107eb89270ce454c
SHA512

1fd840c767b5137268ef1e21c0dd0c634fa71461790c82da3d681b6556c3b2b4d32395969c4c4255c952458fadf893f3cf0e8ea2b3019f9de495ab8707f1ef91
SSDEEP

6144:UbZBwDJx8Sv+H+gEZlWujRXHsSYtQO3n3RlT3PlSxm4MJ1pIGzHoJxF:SHWgEZlWuN3sxtQyhhflbV1CGkJ7

Score

N/A

Malware Config

Signatures

Files

a899aecf6cb8291b375ebcee77a8ff4302f6d95c404789b9107eb89270ce454c
.exe windows x86

babf6022f2ba2715a74c1e9972ebb053

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pcswdlgc

ord21
ord22

pcspref

ord14
ord17
ord15
ord10
ord85
ord84
ord86
ord81
ord80
ord82
ord83
ord3
ord25
ord68
ord67
ord69
ord24
ord65
ord66
ord20
ord21

pcsmsg

ord4
ord2

pcshelp

ord2

pcscc

ord48

pcsclib

ord19
ord265
ord81
ord234
ord235
ord266

pcsw32x

ord16

kernel32

LocalAlloc
InitializeCriticalSection
TlsAlloc
GetProcessVersion
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
lstrcmpA
GetModuleFileNameA
GlobalFlags
SizeofResource
GetCPInfo
GetOEMCP
GlobalSize
DuplicateHandle
GetCurrentProcess
TlsGetValue
WriteFile
SetFilePointer
FlushFileBuffers
LocalReAlloc
ReadFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetThreadLocale
SetErrorMode
WritePrivateProfileStringA
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
UnlockFile
HeapFree
GetTimeZoneInformation
GetACP
CreateFileA
GetCurrentThread
FindFirstFileA
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
FormatMessageA
LocalFree
FreeLibrary
MultiByteToWideChar
DeleteFileA
MoveFileA
GetDateFormatA
GetTimeFormatA
CopyFileA
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalLock
lstrcpyA
GlobalUnlock
GlobalReAlloc
GetShortPathNameA
TerminateProcess
FindClose
GetProfileStringA
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTickCount
GetProfileIntA
lstrlenW
MulDiv
SetLastError
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
LockResource
FindResourceA
LoadResource
lstrcpynA
WideCharToMultiByte
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
CreateMutexA
lstrlenA
CreateProcessA
CloseHandle
GetLastError
HeapReAlloc
HeapSize
LockFile
HeapAlloc

user32

CharUpperA
PostThreadMessageA
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
InvalidateRect
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
AdjustWindowRectEx
LoadCursorA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
MapDialogRect
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetFocus
IsWindowEnabled
IsWindow
SetFocus
RegisterWindowMessageA
EnumWindows
GetClassNameA
GetDC
IsZoomed
IsIconic
GetClientRect
DrawIcon
GetSystemMenu
LoadIconA
LoadStringA
GetMenuItemCount
GetMenuItemID
InsertMenuA
GetKeyState
GetClassInfoA
TranslateAcceleratorA
MessageBoxA
GetWindowLongA
SetWindowLongA
GetSystemMetrics
SystemParametersInfoA
GetMenu
GetMenuState
DeleteMenu
ModifyMenuA
CheckMenuRadioItem
EnableMenuItem
CheckMenuItem
RegisterClipboardFormatA
LoadAcceleratorsA
GetWindowRect
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
SendMessageA
wsprintfA
DestroyIcon
GetDesktopWindow
GetSysColorBrush
GetClassLongA
SetPropA
UnhookWindowsHookEx
EnableWindow
GetParent
GetPropA
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetWindowContextHelpId
SetCursor
TranslateMessage
PostQuitMessage
GetMessageA
SetRect
ValidateRect
GetCursorPos
ReleaseCapture
IsRectEmpty
SetCapture
PtInRect
IsClipboardFormatAvailable
InflateRect
TabbedTextOutA
GrayStringA
DrawTextA
SetWindowPos
EndPaint
OffsetRect
GetMessageTime
GetMessagePos
RemovePropA
CallWindowProcA
ShowCaret
ExcludeUpdateRgn
HideCaret
DefDlgProcA
IsWindowUnicode
DrawFocusRect
UnregisterClassA

gdi32

SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
IntersectClipRect
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
BitBlt
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleDC
CreateDIBitmap
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
CopyMetaFileA
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
GetTextExtentPointA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyExA
RegCreateKeyA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetDesktopFolder
ExtractIconA
DragQueryFileA

comctl32

ord17
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

OleDuplicateData
StringFromCLSID
CoTaskMemAlloc
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
DoDragDrop
CoLockObjectExternal
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoCreateInstance
CoUninitialize
RegisterDragDrop
CreateILockBytesOnHGlobal
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CreateStreamOnHGlobal
OleGetClipboard
RevokeDragDrop
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantCopy
VariantTimeToSystemTime
LoadTypeLi
SysFreeString
SysAllocStringByteLen
SysStringLen
SysStringByteLen
SysAllocString
SysAllocStringLen
VariantChangeType
VariantClear

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

babf6022f2ba2715a74c1e9972ebb053

Headers

File Characteristics

Imports

pcswdlgc

pcspref

pcsmsg

pcshelp

pcscc

pcsclib

pcsw32x

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 208KB - Virtual size: 204KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 12KB - Virtual size: 29KB

.rsrc Size: 96KB - Virtual size: 96KB

.text
Size: 208KB - Virtual size: 204KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 12KB - Virtual size: 29KB

.rsrc
Size: 96KB - Virtual size: 96KB