b048ac7112c2db9bee61e9dadceef66ab6fb4cb17808da385c91ced8f8b48ba7

Sharing

Copy URL

Twitter E-mail

General

Target

b048ac7112c2db9bee61e9dadceef66ab6fb4cb17808da385c91ced8f8b48ba7
Size

356KB
MD5

0554af9338cb34caf9e25108cc815662
SHA1

053c95ffb85ab54a1a2a4540c5ef4f5550ad3433
SHA256

b048ac7112c2db9bee61e9dadceef66ab6fb4cb17808da385c91ced8f8b48ba7
SHA512

898a7ddaa2806b6416000989480565c9a7ac7f247cf21ae1da6cc20cc5c387c606ea98211d89d276d3bb26ccd00c540617a75a0aa0eb7719a7df564f1eca60f5
SSDEEP

6144:nkOjFdMdARzLjec5MH42DPEhBf73NzjlQf8m/3vMQfGcYSVgq/OZjDj:kG/fFewMH42DPE/f73xjlQf8mPvvOtS

Score

N/A

Malware Config

Signatures

Files

b048ac7112c2db9bee61e9dadceef66ab6fb4cb17808da385c91ced8f8b48ba7
.exe windows x86

ee0f19e3235699c9b8a21aab50be09d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
CreateThread
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetProcessVersion
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentDirectoryA
InterlockedExchange
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
FindNextFileA
ReleaseMutex
CreateMutexA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
GetLastError
MulDiv
FormatMessageA
LocalFree
SetLastError
GetVersion
GlobalGetAtomNameA
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
LockResource
FindResourceA
LoadResource
GlobalLock
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetDriveTypeA
GetShortPathNameA
FindFirstFileA
FindClose
lstrcmpA
GetModuleHandleA
WaitForSingleObject
GetCurrentProcess
GetTickCount
GlobalMemoryStatus
GlobalAlloc
DeviceIoControl
GlobalFree
CreateFileA
lstrcpyA
GetACP
DeleteFileA
GetProcAddress
FreeLibrary
lstrcatA
LoadLibraryA
GetModuleFileNameA
lstrlenA
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
WriteProfileStringA
GetSystemDirectoryA
GetProfileStringA
GetProfileIntA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
Sleep
WideCharToMultiByte
FreeEnvironmentStringsA
MultiByteToWideChar

user32

SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
RegisterClipboardFormatA
PostThreadMessageA
GetMenuItemID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetActiveWindow
CopyAcceleratorTableA
ValidateRect
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
SetCursor
PostQuitMessage
EqualRect
ScreenToClient
CopyRect
OffsetRect
DrawTextA
InflateRect
GetAsyncKeyState
GetCursorPos
PtInRect
GetForegroundWindow
SetCursorPos
mouse_event
MapVirtualKeyA
VkKeyScanA
SetActiveWindow
keybd_event
GetParent
GetFocus
LoadBitmapA
MessageBoxA
EnumWindows
IsWindowEnabled
GetWindowLongA
GetClassNameA
GetWindowTextA
GetWindowThreadProcessId
EnableWindow
PostMessageA
KillTimer
IsIconic
DispatchMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetSystemMetrics
GetClientRect
DrawIcon
UnregisterHotKey
GetSystemMenu
AppendMenuA
SendMessageA
IsWindow
IsWindowVisible
FindWindowExA
GetWindowRect
GetDC
ReleaseDC
SetForegroundWindow
SetTimer
LoadIconA
FindWindowA
CharNextA
GetSysColorBrush
GetKeyState
GetDesktopWindow
GetMessageA
TranslateMessage
LoadCursorA
CharUpperA
DestroyMenu
LoadStringA
GetSubMenu
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
MapDialogRect
SetWindowContextHelpId
UpdateWindow
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
CallNextHookEx
GetMenuItemCount
GrayStringA

gdi32

StretchBlt
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
DPtoLP
GetTextColor
GetBkColor
LPtoDP
CreateSolidBrush
SaveDC
GetClipBox
RestoreDC
DeleteDC
DeleteObject
CreateCompatibleDC
SetBkMode
CreateCompatibleBitmap
SelectObject
BitBlt
CreateDIBitmap
GetTextExtentPointA
GetPixel

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

ord17

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromString
CoRegisterMessageFilter
CoRevokeClassObject
StgOpenStorage
CoInitialize
CLSIDFromProgID
CoUninitialize
OleFlushClipboard
OleIsCurrentClipboard
StgIsStorageFile

olepro32

ord253

oleaut32

VariantCopy
VariantClear
VariantChangeType
SysAllocString
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
SysAllocStringLen
SysFreeString

wsock32

inet_ntoa
ntohs
ioctlsocket
gethostname
WSACleanup
WSAStartup
gethostbyname
closesocket
recv
send
getprotobyname
htons
connect
setsockopt
socket

wininet

InternetCanonicalizeUrlA
InternetCrackUrlA

Sections

.text
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee0f19e3235699c9b8a21aab50be09d5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

Sections

.text Size: 264KB - Virtual size: 260KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 12KB - Virtual size: 24.0MB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 264KB - Virtual size: 260KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 24.0MB

.rsrc
Size: 20KB - Virtual size: 18KB