cdc703e5fe2dd676ca202a1005f030d619a974b55f327f35388e214e60ce31b7

Sharing

Copy URL

Twitter E-mail

General

Target

cdc703e5fe2dd676ca202a1005f030d619a974b55f327f35388e214e60ce31b7
Size

1.0MB
MD5

71d1c47e67f32954c2fcf5bc3ac71041
SHA1

5c3637ae6f7098ac93b7c0f2844a004fc53d5ca2
SHA256

cdc703e5fe2dd676ca202a1005f030d619a974b55f327f35388e214e60ce31b7
SHA512

5e4a5fb5de01238d8e24e2f5ca9675964745702ca1695f539774cdd6e4b2c83b239d6cffb243cc2cd117fd31abc2908a14c65c76b4dd21bb315c12d86e853b79
SSDEEP

24576:XP5V+BpTnzIwzsDwhd0wTwSY4HhEP4bje7YE:qLclwhdjsMjbiB

Score

N/A

Malware Config

Signatures

Files

cdc703e5fe2dd676ca202a1005f030d619a974b55f327f35388e214e60ce31b7
.exe windows x86

dd779e41e8a4263ea2d2cbc4216b37cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

phone

ord10
ord11
ord12
ord13
ord17
ord22
ord7
ord16
ord15
ord21
ord2
ord4
ord3
ord18
ord20

kernel32

SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
RaiseException
GetCurrentProcessId
FileTimeToLocalFileTime
LocalAlloc
InterlockedIncrement
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetModuleHandleW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
GetFileSizeEx
GetFileTime
RtlUnwind
ExitThread
TerminateProcess
UnhandledExceptionFilter
UnlockFile
IsDebuggerPresent
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
HeapReAlloc
SetStdHandle
ExitProcess
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
LockFile
FlushFileBuffers
GetThreadLocale
MoveFileA
GetModuleFileNameW
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
FreeResource
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetFileSize
FileTimeToSystemTime
WriteFile
SetFileTime
DosDateTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
DuplicateHandle
CreateFileA
GetFileType
SetFilePointer
FormatMessageA
LocalFree
GetCommandLineA
GetPrivateProfileStringA
CreateMutexA
MultiByteToWideChar
GetCurrentThreadId
GetCurrentProcess
FreeLibrary
WritePrivateProfileStringA
GetPrivateProfileIntA
GetLocalTime
GetModuleFileNameA
lstrlenA
GetFileAttributesA
CreateDirectoryA
CreateProcessA
GetTempPathA
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
CreateThread
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetLastError
InterlockedDecrement
CopyFileA
GetLastError
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
ResumeThread
SuspendThread
CreateEventA
Sleep
SetEvent
WaitForSingleObject
SetThreadPriority
TerminateThread
CloseHandle
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
SetUnhandledExceptionFilter

user32

ReleaseCapture
SetCapture
InvalidateRgn
CopyAcceleratorTableA
UnregisterClassA
DestroyMenu
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
CharNextA
GetWindowThreadProcessId
GetMessageA
ValidateRect
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessagePos
MapWindowPoints
GetKeyState
SetMenu
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
IntersectRect
GetWindowPlacement
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
PtInRect
SetRect
GetWindowRect
EnableWindow
EndDialog
GetSysColor
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuState
GetMenuItemID
GetNextDlgGroupItem
MessageBeep
GetMenuItemCount
RegisterClipboardFormatA
GetMessageTime
DrawFocusRect
SendMessageA
PostMessageA
InvalidateRect
CharUpperA
GetWindow
FindWindowA
SetTimer
KillTimer
GetCursorPos
BringWindowToTop
ScreenToClient
SetParent
LoadIconA
GetClientRect
InflateRect
GetDC
ReleaseDC
SetCursor
LoadCursorA
OffsetRect
LoadImageA
SystemParametersInfoA
GetSystemMetrics
IsWindow
DispatchMessageA
TranslateMessage
PeekMessageA
PostThreadMessageA
MessageBoxA
EndPaint
BeginPaint
IsRectEmpty
SetWindowRgn
IsIconic
PostQuitMessage
SetForegroundWindow
ShowWindow
GetSubMenu
RegisterDeviceNotificationA
IsWindowVisible
SetLayeredWindowAttributes
GetWindowLongA
SetWindowLongA

gdi32

ExtSelectClipRgn
CreateBitmap
CreateCompatibleDC
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleWindowExtEx
CreateDIBSection
SetDIBColorTable
DeleteObject
SetBkMode
SelectObject
SetTextColor
GetTextExtentExPointA
TextOutA
GetTextExtentPoint32A
CreateFontA
CreateFontIndirectA
GetStockObject
GetObjectA
GetPixel
Rectangle
CreatePen
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
ExcludeClipRect
CreateRectRgn
CombineRgn
GetDIBColorTable
StretchBlt
DeleteDC

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA

shell32

ShellExecuteA
Shell_NotifyIconA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderPathA

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootA
PathIsUNCA
UrlUnescapeA
PathFindExtensionA
PathFindFileNameA
PathFileExistsA

oledlg

ord8

ole32

CoUninitialize
CoInitialize
OleRun
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoCreateInstance

oleaut32

SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantInit
VariantClear
VariantCopy
SysStringLen
VariantChangeType
DispCallFunc
LoadRegTypeLi
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
SysFreeString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
SysAllocString
GetErrorInfo

gdiplus

GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusShutdown

ws2_32

recv
send
inet_addr
gethostbyname
htons
inet_ntoa
connect
setsockopt
closesocket
socket

wininet

InternetCloseHandle
InternetCanonicalizeUrlA
InternetOpenUrlA
InternetReadFile
InternetCrackUrlA
InternetOpenA
InternetGetConnectedState
HttpQueryInfoA

netapi32

Netbios

Sections

.text
Size: 471KB - Virtual size: 471KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd779e41e8a4263ea2d2cbc4216b37cc

Headers

DLL Characteristics

File Characteristics

Imports

phone

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

ws2_32

wininet

netapi32

Sections

.text Size: 471KB - Virtual size: 471KB

.rdata Size: 112KB - Virtual size: 111KB

.data Size: 14KB - Virtual size: 36KB

.rsrc Size: 123KB - Virtual size: 122KB

.reloc Size: 55KB - Virtual size: 54KB

.text
Size: 471KB - Virtual size: 471KB

.rdata
Size: 112KB - Virtual size: 111KB

.data
Size: 14KB - Virtual size: 36KB

.rsrc
Size: 123KB - Virtual size: 122KB

.reloc
Size: 55KB - Virtual size: 54KB