a227233fc359a5015542de8f1b212cfaf1c971789296efe61a350c62f2609cea

Sharing

Copy URL Twitter E-mail

General

Target

a227233fc359a5015542de8f1b212cfaf1c971789296efe61a350c62f2609cea
Size

572KB
MD5

da3a7c34293e2423e3c4402e674882a7
SHA1

5113c7e8c974015ed9098aa10fcdf232da305f1e
SHA256

a227233fc359a5015542de8f1b212cfaf1c971789296efe61a350c62f2609cea
SHA512

69ea2020a34920c7a705fd129018b719d539a1080cb0e711513806cb71940dd751a764c97db36b44e67006a99eba213af350e45fc6718a3db1ba631842883175
SSDEEP

12288:VgnDFYRS1Cmvw+kkrtAteWhaxVi/Sex+pvL:VOiIOY6S

Score

N/A

Malware Config

Signatures

Files

a227233fc359a5015542de8f1b212cfaf1c971789296efe61a350c62f2609cea
.exe windows x86

79e33e0e501220766f79490472388c76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetStartupInfoA
GetCommandLineA
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
CreateThread
ExitThread
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
SetErrorMode
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetProcessVersion
GlobalFlags
SuspendThread
SetThreadPriority
ResumeThread
GetCurrentThread
FindNextFileA
lstrcmpA
MulDiv
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
GetCurrentProcess
DuplicateHandle
FindFirstFileA
FindClose
GetFileTime
GetFileSize
GetFileAttributesA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
lstrcpynA
InterlockedExchange
FormatMessageA
LockResource
FindResourceA
LoadResource
InterlockedDecrement
InterlockedIncrement
GetComputerNameA
SetFilePointer
WriteFile
CreateEventA
WaitForSingleObject
CancelIo
ResetEvent
GlobalFree
CreateToolhelp32Snapshot
Thread32First
Thread32Next
SetCurrentDirectoryA
CreateDirectoryA
GetTempPathA
GetCurrentProcessId
InitializeCriticalSection
SetEvent
GetCurrentThreadId
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLocalTime
GetPrivateProfileIntA
lstrlenA
lstrcpyA
GetACP
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileStringA
lstrcmpiA
GetPrivateProfileStringA
LocalAlloc
LocalFree
Sleep
CreateFileA
DeviceIoControl
CloseHandle
GetVersionExA
GetLogicalDrives
GetDriveTypeA
QueryDosDeviceA
GetLastError
GetModuleFileNameA
GlobalAlloc
GlobalLock
HeapCreate
GlobalUnlock

user32

PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
CharUpperA
DestroyMenu
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetTopWindow
IsChild
WinHelpA
RegisterClassA
GetMenu
GetWindowTextLengthA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetCursorPos
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
SetFocus
GetNextDlgTabItem
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
GetMessageA
GetWindowLongA
GetDlgItem
IsWindowEnabled
LoadMenuA
GrayStringA
DrawTextA
TabbedTextOutA
IntersectRect
EqualRect
GetActiveWindow
UnionRect
DrawFocusRect
DrawTextExA
DrawFrameControl
InflateRect
wsprintfA
ClientToScreen
WindowFromPoint
PostThreadMessageA
RegisterClipboardFormatA
ReleaseCapture
IsRectEmpty
CopyRect
SetCapture
GetClassInfoA
DefWindowProcA
LoadCursorA
GetDoubleClickTime
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
IsIconic
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
DrawIcon
SetParent
LoadIconA
KillTimer
SetTimer
SetCursor
FillRect
OffsetRect
RedrawWindow
UpdateWindow
GetSysColor
GetMenuItemCount
CharNextA
GetSysColorBrush
GetDesktopWindow
LoadStringA
MapDialogRect
GetForegroundWindow
SetWindowContextHelpId
GetMenuItemID
GetSubMenu
ModifyMenuA
GetWindowTextA
SetWindowTextA
GetWindow
GetDlgCtrlID
GetClassNameA
MessageBoxA
GetKeyState
GetDC
ReleaseDC
IsWindowVisible
GetCapture
IsWindow
GetClientRect
GetSystemMetrics
SendMessageA
InvalidateRect
GetParent
DrawEdge
EnableWindow
GetWindowRect
DestroyWindow
ValidateRect
ScreenToClient
PtInRect
TrackPopupMenu
CreatePopupMenu
AppendMenuA
GetFocus
PostMessageA
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
GetPropA
UnregisterClassA

gdi32

GetDeviceCaps
GetWindowExtEx
GetMapMode
DPtoLP
GetTextColor
LPtoDP
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetMapMode
SetROP2
GetViewportExtEx
PatBlt
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetCharWidthA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetBitmapBits
CreatePatternBrush
PolyPolyline
GetCurrentObject
GetBkColor
CreatePen
GetTextMetricsA
Rectangle
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetViewportOrgEx
SetViewportOrgEx
BitBlt
CreateFontIndirectA
DeleteObject
CreateSolidBrush
GetTextExtentPoint32A
SetBkMode

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ImageList_Draw
ImageList_GetImageInfo
ImageList_GetImageCount
ord17
ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString

shlwapi

PathFileExistsA

setupapi

CM_Get_Child
CM_Get_Parent
CM_Get_Sibling
CM_Get_DevNode_Registry_PropertyA
CM_Locate_DevNodeA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
CM_Get_Device_IDA
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInterfaceA
SetupDiGetDeviceRegistryPropertyA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 416KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

79e33e0e501220766f79490472388c76

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

shlwapi

setupapi

version

Sections

.text Size: 416KB - Virtual size: 414KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 36KB - Virtual size: 119KB

.rsrc Size: 40KB - Virtual size: 40KB

.text
Size: 416KB - Virtual size: 414KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 36KB - Virtual size: 119KB

.rsrc
Size: 40KB - Virtual size: 40KB