7961f7a3841636b6fd2475f957e1d322b32d2348d878527857d64b43457dbe67

Sharing

Copy URL Twitter E-mail

General

Target

7961f7a3841636b6fd2475f957e1d322b32d2348d878527857d64b43457dbe67
Size

268KB
MD5

5e641a521e2503ac81863cceae2cb6b9
SHA1

b5ee0f18323d5d8790b01c3aea63214a2483833d
SHA256

7961f7a3841636b6fd2475f957e1d322b32d2348d878527857d64b43457dbe67
SHA512

a03269380d9f76d05d669093e6510205888450f46f2113b7c5ec05250eeb0433bc61e545dfa823e670cb4291b8131dd03ec3a956723d352107e91c2cb829c8ee
SSDEEP

3072:MgO1PqedFmWa7nCHSdNUI15xzGomDGFwGBaxwpnhH7IcicqIo8da/nlyyr:MvtmWa7UuU4xzCEEw74/ly

Score

N/A

Malware Config

Signatures

Files

7961f7a3841636b6fd2475f957e1d322b32d2348d878527857d64b43457dbe67
.exe windows x86

85c34bd8de8b5dc87f121672fa49a8d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

ntohl
socket
gethostbyname
ioctlsocket
htons
connect
send
recv
closesocket
select
WSACleanup
htonl
WSAStartup

kernel32

RtlUnwind
GetStartupInfoA
ExitProcess
TerminateProcess
GetFileTime
HeapAlloc
RaiseException
GetLocalTime
GetACP
HeapReAlloc
HeapSize
GetFileSize
CreateThread
HeapFree
ExitThread
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
GetFileAttributesA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
SetErrorMode
FreeEnvironmentStringsA
GetTickCount
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetEnvironmentVariableA
GetFileType
CreateFileA
WaitForSingleObject
CloseHandle
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
DeleteFileA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetSystemTime
SetLastError
Sleep
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetSystemTime
GetCurrentProcess
GetLastError
GetCommandLineA
GetModuleFileNameA
lstrlenA
GetProfileStringA
DuplicateHandle
SizeofResource
GetOEMCP
GetCPInfo
GlobalFlags
GetProcessVersion
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
FileTimeToLocalFileTime
lstrcpynA
GetThreadLocale
GetPrivateProfileStringA
FileTimeToSystemTime
WritePrivateProfileStringA
FormatMessageA
GetPrivateProfileIntA
MulDiv
lstrcatA
LocalFree
GetVersion
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
MultiByteToWideChar
lstrcpyA
GetModuleHandleA
InterlockedIncrement
WideCharToMultiByte
InterlockedDecrement
LockResource
GlobalUnlock
GlobalFree
CreateEventA
FindResourceA
LoadResource
ResumeThread
SuspendThread
SetThreadPriority
GetStringTypeW
SetEvent
IsBadReadPtr
FreeEnvironmentStringsW
GetEnvironmentStrings
IsBadCodePtr

user32

GetClassNameA
GetSysColorBrush
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
LoadCursorA
InflateRect
CharNextA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
LoadStringA
wvsprintfA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
GetTopWindow
IsChild
PtInRect
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
CopyRect
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
PostQuitMessage
IsWindow
SetCursor
FillRect
GetDesktopWindow
WinHelpA
GetCapture
CreateWindowExA
OffsetRect
GetWindowRect
RedrawWindow
GetParent
UpdateWindow
GetSysColor
PostMessageA
GetDC
ReleaseDC
InvalidateRect
EnableWindow
LoadMenuA
GetSubMenu
GetCursorPos
SetForegroundWindow
KillTimer
ExitWindowsEx
IsWindowVisible
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
SetTimer
LoadIconA
CallWindowProcA
ScreenToClient
ShowCaret
ExcludeUpdateRgn
UnregisterClassA
DefDlgProcA
IsWindowUnicode
DrawFocusRect
HideCaret

gdi32

BitBlt
GetTextExtentPointA
GetViewportOrgEx
DeleteObject
CreateFontIndirectA
SetViewportOrgEx
CreateCompatibleBitmap
GetObjectA
CreateDIBitmap
CreateSolidBrush
CreateCompatibleDC
Rectangle
SetTextAlign
ScaleWindowExtEx
GetViewportExtEx
CreatePen
GetWindowExtEx
RectVisible
TextOutA
PtVisible
Escape
GetTextColor
ExtTextOutA
GetMapMode
GetBkColor
DPtoLP
LPtoDP
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetMapMode
SetViewportExtEx
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
PatBlt
CreateBitmap
IntersectClipRect
GetDeviceCaps
GetStockObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueExA
RegCloseKey
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
RegSetValueExA
RegCreateKeyExA

shell32

ShellExecuteA
Shell_NotifyIconA

comctl32

ord17

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
StgOpenStorageOnILockBytes
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CLSIDFromProgID
OleUninitialize
OleInitialize
CLSIDFromString

olepro32

ord253

oleaut32

SysAllocStringByteLen
VariantCopy
VariantTimeToSystemTime
SysAllocString
VariantClear
VariantChangeType
SysAllocStringLen
SysFreeString
SysStringLen

urlmon

URLDownloadToFileA

Sections

.text
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

85c34bd8de8b5dc87f121672fa49a8d3

Headers

File Characteristics

Imports

wsock32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

Sections

.text Size: 176KB - Virtual size: 172KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 24KB - Virtual size: 41KB

.rsrc Size: 16KB - Virtual size: 12KB

.jgd Size: 4KB - Virtual size: 4KB

.text
Size: 176KB - Virtual size: 172KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 24KB - Virtual size: 41KB

.rsrc
Size: 16KB - Virtual size: 12KB

.jgd
Size: 4KB - Virtual size: 4KB