a63c3bfc97db6f704607742a5f0a42afde906b26dcba9e228d65b714250f7cb0

Sharing

Copy URL Twitter E-mail

General

Target

a63c3bfc97db6f704607742a5f0a42afde906b26dcba9e228d65b714250f7cb0
Size

3.1MB
MD5

2375802e7d5e6119201b229db53d39c2
SHA1

e3e2848e2cf88d7e27b41274f1c304b75dd56590
SHA256

a63c3bfc97db6f704607742a5f0a42afde906b26dcba9e228d65b714250f7cb0
SHA512

0f10245e7a9140998712012d1e3d52451b54c612945c14da70c14a71488905aef5f8a4caa201114d41df8ce71d9c26de5f912f44f283a7ec150b58858f80ae58
SSDEEP

24576:rBiWl94bnCsgXdgNDOY9+mlFQI6CyiiC5Y1U3DZw6ObI8/8olvahBxVcxvJsMR1v:rBxPgNDFFQ9UHBCWYvRptLFlTpi

Score

N/A

Malware Config

Signatures

Files

a63c3bfc97db6f704607742a5f0a42afde906b26dcba9e228d65b714250f7cb0
.exe windows x86

c2b818b854be1da11fbfdd3ef29873b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcessHeap
GetStartupInfoA
ExitProcess
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
VirtualFree
HeapDestroy
HeapCreate
TlsAlloc
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
SetHandleCount
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GlobalHandle
GlobalReAlloc
TlsGetValue
GetFileTime
SetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
GetThreadLocale
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameW
GlobalAlloc
FormatMessageA
GlobalLock
GlobalUnlock
GlobalFree
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
RaiseException
WritePrivateProfileStringA
GetPrivateProfileIntA
GetSystemTime
CompareFileTime
LoadLibraryW
GetFileAttributesW
CreateFileW
GetTempPathW
LockFileEx
DeleteFileW
GetFullPathNameW
UnmapViewOfFile
CreateFileMappingA
MapViewOfFileEx
CreateEventA
ResetEvent
GetCurrentDirectoryA
OutputDebugStringA
ExitThread
SetEvent
GetFileAttributesA
FindResourceExW
FindResourceW
VirtualProtect
GetCurrentProcess
WriteProcessMemory
lstrcmpA
InterlockedCompareExchange
GetLocaleInfoA
GetVersionExA
GetFileSize
ReadFile
InterlockedDecrement
SetLastError
InterlockedIncrement
FreeLibrary
MulDiv
lstrcatA
AreFileApisANSI
GetWindowsDirectoryA
GetFileInformationByHandle
PeekNamedPipe
LoadLibraryA
GetProcAddress
FindResourceExA
LocalAlloc
LocalFree
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcmpW
SetFilePointer
FlushFileBuffers
GetExitCodeThread
WaitForSingleObject
TerminateThread
GetVolumeInformationA
CreateProcessA
CreateDirectoryA
CopyFileA
RemoveDirectoryA
GetSystemDirectoryA
CreateFileA
WriteFile
ResumeThread
SuspendThread
GetTempPathA
CreateThread
ReleaseMutex
lstrcpyA
GetTickCount
GetCommandLineA
CreateMutexA
GetModuleHandleA
FreeResource
FindFirstFileA
FindNextFileA
FindClose
Sleep
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
DeleteFileA
lstrcpynA
GetLocalTime
CloseHandle
GetModuleFileNameA
GetComputerNameA
GetStringTypeExA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetStdHandle
InterlockedExchange

user32

GetMenuCheckMarkDimensions
ModifyMenuA
CheckMenuItem
GetMenuStringA
CreateDialogIndirectParamA
GetNextDlgTabItem
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
GetTopWindow
GetMessageTime
GetMessagePos
GetMenu
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetWindowPlacement
IntersectRect
DefWindowProcA
RegisterClassExA
CreateWindowExA
DestroyWindow
PostThreadMessageA
EndDialog
EnumWindows
GetWindowPlacement
MsgWaitForMultipleObjects
PeekMessageA
DispatchMessageA
TranslateMessage
wsprintfA
GetWindowTextA
GetActiveWindow
GetDlgItem
BeginPaint
EndPaint
GetAsyncKeyState
GetKeyState
DrawFocusRect
GetCapture
GetComboBoxInfo
DestroyCursor
LoadMenuA
SetDlgItemTextA
SetFocus
EnableScrollBar
SetScrollPos
GetMessageA
CallWindowProcA
GetSysColorBrush
GetClassInfoA
DestroyMenu
IsRectEmpty
IsZoomed
GetMenuItemID
SetMenuDefaultItem
EnableMenuItem
SetRect
GetSubMenu
WindowFromPoint
LoadImageW
LoadImageA
LoadCursorW
LoadIconW
LoadBitmapW
LoadStringW
GetFocus
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
SystemParametersInfoA
TrackPopupMenuEx
TrackPopupMenu
SetRectEmpty
GetMenuItemRect
UnionRect
FrameRect
SetMenuItemInfoA
SetMenuItemBitmaps
GetMenuItemInfoA
GetMenuDefaultItem
InflateRect
GetMenuItemCount
GetMenuState
IsMenu
InsertMenuItemA
OffsetRect
LoadCursorA
ReleaseCapture
SetCapture
SetCursor
CopyRect
ClientToScreen
CopyImage
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
GetSysColor
ValidateRect
DrawTextA
GetClassNameA
IsDialogMessageA
SetWindowTextA
MoveWindow
TabbedTextOutA
DrawTextExA
GrayStringA
RegisterClipboardFormatA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
UnregisterClassA
ScreenToClient
PtInRect
GetSystemMenu
DrawStateA
DestroyIcon
GetWindowThreadProcessId
AttachThreadInput
GetForegroundWindow
SetActiveWindow
CharNextA
MapVirtualKeyA
GetKeyNameTextA
SetWindowContextHelpId
MapDialogRect
IsWindowEnabled
LoadBitmapA
FindWindowExA
UpdateWindow
wsprintfW
InvalidateRect
GetDlgCtrlID
SetWindowRgn
RedrawWindow
MapWindowPoints
PostQuitMessage
GetDesktopWindow
GetWindowLongA
SetWindowLongA
SetLayeredWindowAttributes
ShowWindow
GetDC
FillRect
GetParent
CharLowerBuffA
RegisterWindowMessageA
GetCursorPos
UnregisterHotKey
RegisterHotKey
SetForegroundWindow
SetParent
SetTimer
IsWindowVisible
BringWindowToTop
AppendMenuA
CreatePopupMenu
IsWindow
GetWindowRect
GetWindowDC
ReleaseDC
GetWindow
FindWindowA
PostMessageA
LoadStringA
MessageBoxA
KillTimer
SetWindowPos
CharUpperA
GetSystemMetrics
EnableWindow
LoadIconA
GetClientRect
IsIconic
SendMessageA
DrawIcon

gdi32

ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
RectVisible
PatBlt
CreateRectRgnIndirect
GetTextMetricsA
GetRgnBox
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
ExcludeClipRect
RestoreDC
SaveDC
DeleteObject
SetPixel
GetDeviceCaps
GetBitmapBits
SetBitmapBits
GetPixel
CreateBrushIndirect
MoveToEx
LineTo
GetTextColor
SetStretchBltMode
DPtoLP
CreateBitmap
GetMapMode
SetMapMode
CreateSolidBrush
CreateDIBitmap
GetBkColor
GetBkMode
SetBkColor
SetBkMode
SetTextColor
TextOutA
GetDIBits
CreateEllipticRgn
Rectangle
CreateFontIndirectA
ExtCreatePen
CreatePen
CombineRgn
GetTextExtentPoint32A
CreateFontA
CreateRectRgn
GetStockObject
GetObjectA
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
StretchBlt
DeleteDC
GetClipBox

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyA
GetUserNameA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA

shell32

Shell_NotifyIconA
ShellExecuteExA
SHGetSpecialFolderPathA
SHGetFolderPathA
SHAppBarMessage
ShellExecuteA

comctl32

ImageList_AddMasked
ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ImageList_GetImageInfo
_TrackMouseEvent
ord17
ImageList_GetImageCount

shlwapi

PathAppendA
PathRemoveFileSpecA
PathAddBackslashA
PathStripPathA
PathFileExistsA
StrCmpNIW
PathIsDirectoryA
PathCombineA
StrToIntA
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleRun
StringFromGUID2
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SysFreeString
SysAllocStringLen
SysAllocString
SysStringLen
VarBstrCmp
VariantInit
VariantClear
SysAllocStringByteLen
VariantCopy
VariantChangeType
SafeArrayGetVartype
SafeArrayGetUBound
SafeArrayGetLBound

urlmon

ObtainUserAgentString

dbghelp

ImageDirectoryEntryToData

wininet

InternetQueryOptionA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetGetConnectedState
HttpSendRequestA
FindFirstUrlCacheEntryExA
InternetSetCookieA
FindNextUrlCacheEntryExA
InternetCrackUrlA
FindCloseUrlCache
InternetConnectA
InternetReadFile
InternetGetLastResponseInfoA
InternetGetCookieA
InternetCanonicalizeUrlA
InternetOpenA
InternetSetOptionA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA

rpcrt4

UuidCreate

iphlpapi

IcmpCreateFile
IcmpSendEcho
GetAdaptersInfo

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ws2_32

gethostbyname
WSACleanup
WSAStartup

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 541B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2b818b854be1da11fbfdd3ef29873b4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

dbghelp

wininet

rpcrt4

iphlpapi

version

ws2_32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 268KB - Virtual size: 267KB

.data Size: 24KB - Virtual size: 44KB

.tls Size: 4KB - Virtual size: 541B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 268KB - Virtual size: 267KB

.data
Size: 24KB - Virtual size: 44KB

.tls
Size: 4KB - Virtual size: 541B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB