b9322adb178bf0a0ae4d6b6054935f9216c08b15bdca03e32d476d77d35d5095

Sharing

Copy URL Twitter E-mail

General

Target

b9322adb178bf0a0ae4d6b6054935f9216c08b15bdca03e32d476d77d35d5095
Size

676KB
MD5

bc69fee12ee62d5664d01b9f3381f3b2
SHA1

de743ad83470693043d8c20abd37ba53f0d651bc
SHA256

b9322adb178bf0a0ae4d6b6054935f9216c08b15bdca03e32d476d77d35d5095
SHA512

e361956fcf3eb13d4babe6381a8658bf5ed6fa30e4055d2a913eb05fa1641e4be4fffaff5a12d98b4e02abec1d489e823576645bacd815e5ac6dd53890648c1c
SSDEEP

12288:wMtLkcdr3j7rZCWLPA7j79a18haBqDjQw2j9SVJXdT0Ak1yfOi:wMCWkfxUdBrw2RSPXdYAk1yGi

Score

N/A

Malware Config

Signatures

Files

b9322adb178bf0a0ae4d6b6054935f9216c08b15bdca03e32d476d77d35d5095
.exe windows x86

d802f124d6d74a081599dabf2ed4c9de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
InitializeCriticalSection
ExitProcess
GetProcAddress
WriteFile
MultiByteToWideChar
FatalAppExitA
RaiseException
HeapFree
GetCPInfo
IsBadWritePtr
FreeEnvironmentStringsW
LCMapStringW
GetModuleFileNameW
GetCurrentThread
VirtualAlloc
HeapCreate
FreeEnvironmentStringsA
SetLastError
HeapReAlloc
GetModuleFileNameA
DeleteCriticalSection
SetConsoleCtrlHandler
GetLocaleInfoW
LeaveCriticalSection
CompareStringA
GetCurrentThreadId
GetACP
GetStringTypeW
RtlUnwind
GetCurrentProcessId
TlsGetValue
EnterCriticalSection
VirtualFree
IsBadReadPtr
TlsAlloc
GetStringTypeA
HeapSize
GetStartupInfoW
IsBadCodePtr
VirtualProtect
SetUnhandledExceptionFilter
CreateMutexW
GetUserDefaultLCID
HeapDestroy
GetTimeFormatA
LCMapStringA
GetSystemTimeAsFileTime
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
IsValidCodePage
SetEnvironmentVariableA
TlsSetValue
LoadLibraryA
GetSystemInfo
InterlockedExchange
SetFilePointer
HeapAlloc
GetFileType
GetCommandLineA
CompareStringW
GetDateFormatA
ReadFile
GetStartupInfoA
GetVersionExA
WideCharToMultiByte
IsValidLocale
GetModuleHandleA
GetEnvironmentStrings
TerminateProcess
SetStdHandle
GetStdHandle
GetCommandLineW
GetModuleHandleW
GetOEMCP
GetTimeZoneInformation
CloseHandle
GetLocaleInfoA
FlushFileBuffers
TlsFree
SetHandleCount
VirtualQuery

urlmon

URLDownloadToCacheFileW
UrlMkSetSessionOption

shlwapi

PathRemoveExtensionA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathCompactPathA
PathStripToRootA

gdi32

CreatePolygonRgn
GetTextCharsetInfo
CreateEllipticRgn
GetDIBits
SetMapMode
RestoreDC
LineTo
CreateFontIndirectW
SetWindowExtEx
CreatePatternBrush
Ellipse
GetPaletteEntries
SetROP2
GetClipBox
RectInRegion
GetBkColor
CreateRectRgn
GetRegionData
CombineRgn
SetViewportOrgEx
EndPath
SetBrushOrgEx
EqualRgn
Arc
CreateDIBSection
PatBlt
CreateRectRgnIndirect
RealizePalette
SetGraphicsMode
GetRgnBox
GetTextMetricsA
GetPixel
DeleteDC
CreateBitmap
CreatePalette
BeginPath
GetStockObject
SetWorldTransform
SelectObject
PtInRegion
SaveDC
EnumFontFamiliesExW
Rectangle
CreateCompatibleBitmap
BitBlt
ExtSelectClipRgn
SelectPalette
SelectClipRgn
TextOutW
GetTextColor
GetWindowExtEx
StrokePath
GdiFlush
CreateCompatibleDC
Polygon
DeleteObject
SetPixel
GetTextMetricsW
CreateDCW
MoveToEx
PolyBezier
StartPage
ExtCreatePen
EndDoc
EndPage
SetWindowOrgEx
GetObjectW
OffsetRgn
CreateSolidBrush
SetBkColor
SetViewportExtEx
SetTextColor
SetTextAlign
ExtTextOutW
StretchDIBits
StretchBlt
GetDeviceCaps
GetCharABCWidthsW
SetPolyFillMode
RoundRect
SetBkMode
SetStretchBltMode
GetTextExtentPoint32W
Polyline
CreatePen

comctl32

ImageList_Draw
ImageList_Create
ImageList_BeginDrag
ImageList_DragShowNolock
PropertySheetA
ImageList_DragMove
ImageList_GetIconSize
DestroyPropertySheetPage
ImageList_GetImageCount
ImageList_EndDrag
InitCommonControlsEx
ImageList_AddMasked
ImageList_SetBkColor
ImageList_DragEnter
ord17
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_Replace
ImageList_Add
ImageList_Destroy
_TrackMouseEvent
CreatePropertySheetPageA
ImageList_Remove
ImageList_LoadImageA

user32

GetKeyState
SetScrollInfo
ScreenToClient
GetDlgItem
CheckMenuItem
GetMessagePos
GetParent
DrawEdge
GetMenuDefaultItem
GetMenu
GetWindowDC
IsWindow
SetClipboardData
GetTopWindow
TrackPopupMenuEx
RegisterClassW
GetWindowPlacement
CreateWindowExW
GetScrollInfo
OpenClipboard
SystemParametersInfoW
IsWindowEnabled
IsIconic
BeginPaint
RegisterWindowMessageW
EnableMenuItem
PeekMessageW
InvalidateRect
EnableWindow
GetClassInfoW
TrackPopupMenu
GetClassInfoExW
SetScrollPos
SetTimer
EndPaint
GetCursorPos
RedrawWindow
SetFocus
GetClassNameW
AdjustWindowRectEx
DrawIcon
GetSysColor
GrayStringW
TabbedTextOutW
SetWindowPlacement
IsClipboardFormatAvailable
SetWindowLongW
GetAncestor
SetRectEmpty
DestroyIcon
IsZoomed
DestroyCursor
GetNextDlgGroupItem
CharUpperW
TranslateMDISysAccel
GetWindowRgn
ReleaseCapture
SetCapture
GetSysColorBrush
RegisterClassExW
GetSubMenu
GetSystemMetrics
UpdateWindow
GetDesktopWindow
MapWindowPoints
DrawTextW

winspool.drv

ord204
OpenPrinterW
ClosePrinter

advapi32

RegEnumKeyExW
RegQueryValueExW

shell32

Shell_NotifyIconA
SHGetDesktopFolder
SHChangeNotify
SHGetSpecialFolderLocation

comdlg32

GetFileTitleA
GetOpenFileNameA

ole32

CLSIDFromString
OleRun
OleRegEnumVerbs
WriteClassStm
OleFlushClipboard
CoFreeUnusedLibraries
OleRegGetMiscStatus
StgOpenStorage
OleInitialize
OleRegGetUserType
OleIsRunning

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 456KB - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d802f124d6d74a081599dabf2ed4c9de

Headers

File Characteristics

Imports

kernel32

urlmon

shlwapi

gdi32

comctl32

user32

winspool.drv

advapi32

shell32

comdlg32

ole32

Sections

.text Size: 80KB - Virtual size: 78KB

.rdata Size: 456KB - Virtual size: 453KB

.data Size: 104KB - Virtual size: 102KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 80KB - Virtual size: 78KB

.rdata
Size: 456KB - Virtual size: 453KB

.data
Size: 104KB - Virtual size: 102KB

.rsrc
Size: 32KB - Virtual size: 31KB