bb8ab73a32358f82b1d424c1e4a2c10f702c3d27297d071ddb89341721c9fdc8

Sharing

Copy URL Twitter E-mail

General

Target

bb8ab73a32358f82b1d424c1e4a2c10f702c3d27297d071ddb89341721c9fdc8
Size

3.9MB
MD5

2892a54014056efe5fcf81abb8c5a37e
SHA1

cc6fedd076de30629b7ccbcb7e409d2a04aa9c4f
SHA256

bb8ab73a32358f82b1d424c1e4a2c10f702c3d27297d071ddb89341721c9fdc8
SHA512

8b58ee579fd674706ae053fcf11a25d0d53bb6679a22713f70b393c603424d878b578b42554ac87a29ffe9fbde3117bc795795218473825e8439a6b8ef3e5b39
SSDEEP

98304:gajiUHg8EWrOGNxIpE4P+AKxhZSiDxJlAlKR1f+GZ/zp:3jic0WKGNxIpPGz/hGKTfBtzp

Score

N/A

Malware Config

Signatures

Files

bb8ab73a32358f82b1d424c1e4a2c10f702c3d27297d071ddb89341721c9fdc8
.exe windows x86

62dd439ea1fae82f9efd6ad0569e9266

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

WinHelpA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageA
MoveWindow
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
GetWindowThreadProcessId
TabbedTextOutA
DrawTextExA
GrayStringA
BeginPaint
EndPaint
DestroyMenu
GetSysColorBrush
UnregisterClassA
TrackPopupMenuEx
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
CopyRect
DrawTextA
InflateRect
GetMonitorInfoA
SetParent
OffsetRect
GetSystemMetrics
GetCapture
SetTimer
RedrawWindow
AppendMenuA
CreatePopupMenu
IsDlgButtonChecked
SetWindowTextA
PostMessageA
EndDialog
LoadIconA
SetDlgItemTextA
GetDlgItemTextA
GetDlgItem
SendDlgItemMessageA
DestroyWindow
GetWindow
DestroyIcon
GetMenuItemCount
GetMenuItemID
GetSubMenu
UpdateWindow
PtInRect
GetWindowTextA
CharNextA
MessageBoxA
GetWindowLongA
SetWindowLongA
PeekMessageA
ClientToScreen
GetCursorPos
WindowFromPoint
ScreenToClient
GetParent
IsWindow
GetDesktopWindow
IsIconic
GetWindowRect
SetWindowPos
ShowWindow
GetWindowPlacement
InvalidateRect
SendMessageA
LoadCursorA
LoadStringA
DrawFrameControl
IntersectRect
IsRectEmpty
GetDC
GetSysColor
FillRect
ReleaseDC
wsprintfA
SetRectEmpty
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
KillTimer
MapWindowPoints
CharUpperA
SetRect
SetCursor
EnableWindow
GetClientRect
DialogBoxIndirectParamA

kernel32

lstrcmpW
SetLastError
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
SetThreadPriority
ResumeThread
SuspendThread
GetCurrentProcessId
GetModuleFileNameW
InterlockedDecrement
GlobalFlags
LocalAlloc
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetThreadLocale
FlushFileBuffers
GetCurrentProcess
SetErrorMode
GetModuleHandleA
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
HeapSize
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetThreadExecutionState
ResetEvent
PulseEvent
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryExA
LeaveCriticalSection
EnterCriticalSection
CreateThread
CreateEventA
WaitForMultipleObjects
CreateSemaphoreA
GetSystemTimeAsFileTime
SetEvent
ReleaseSemaphore
GetACP
QueryPerformanceCounter
FindResourceExA
Sleep
FreeResource
GetProcAddress
LocalFree
FormatMessageA
GetFullPathNameA
GlobalReAlloc
GetLocaleInfoA
WritePrivateProfileStringA
SetFilePointer
GetTempFileNameA
ReadFile
GetVersionExA
lstrcmpA
WaitForSingleObject
GetSystemInfo
GetTickCount
GlobalFree
GetFileAttributesA
lstrcpynA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileSize
MulDiv
lstrcatA
OutputDebugStringA
lstrlenA
CompareStringW
CompareStringA
GetVersion
GetLastError
MultiByteToWideChar
InterlockedExchange
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameA
GetTempPathA
CreateFileA
WriteFile
CloseHandle
DeleteFileA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
LoadLibraryA
FreeLibrary
lstrcmpiA
RtlUnwind

msimg32

AlphaBlend

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueExA

shell32

ExtractIconExA
SHGetMalloc

comctl32

ord17

shlwapi

PathFileExistsA
PathAppendA
PathRemoveFileSpecA
PathFindFileNameA
PathFindExtensionA
StrStrIA

gdi32

MoveToEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
LineTo
CreateBitmap
GetClipBox
GetPixel
SetTextColor
SetBkColor
GetBkMode
SetBkMode
Rectangle
CreateFontIndirectA
CreatePen
BitBlt
SetMapMode
GetStockObject
GetDeviceCaps
SetDIBitsToDevice
SetStretchBltMode
StretchDIBits
GetDIBColorTable
RestoreDC
SaveDC
CreateSolidBrush
PlayEnhMetaFile
GetObjectA
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
DeleteEnhMetaFile
CreatePalette
SelectObject

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString
VariantClear
VariantChangeType
VariantInit

winmm

timeGetTime
timeBeginPeriod
timeSetEvent
timeEndPeriod
timeKillEvent
timeGetDevCaps

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62dd439ea1fae82f9efd6ad0569e9266

Headers

File Characteristics

Imports

user32

kernel32

msimg32

advapi32

shell32

comctl32

shlwapi

gdi32

winspool.drv

comdlg32

ole32

oleaut32

winmm

Sections

.text Size: 496KB - Virtual size: 495KB

.rdata Size: 124KB - Virtual size: 122KB

.data Size: 32KB - Virtual size: 60KB

.tls Size: 4KB - Virtual size: 4B

.rsrc Size: 128KB - Virtual size: 126KB

.text
Size: 496KB - Virtual size: 495KB

.rdata
Size: 124KB - Virtual size: 122KB

.data
Size: 32KB - Virtual size: 60KB

.tls
Size: 4KB - Virtual size: 4B

.rsrc
Size: 128KB - Virtual size: 126KB