9ac92bc25bb24148ddd1e685f4df095871371d752da0108913cc53c2dda23b8b

Sharing

Copy URL

Twitter E-mail

General

Target

9ac92bc25bb24148ddd1e685f4df095871371d752da0108913cc53c2dda23b8b
Size

1.3MB
MD5

8eefc4be9f6fcf9e08e0de0108985872
SHA1

afeeb6ea2f6f1d6977425e0a1d2f5da5c6df8a33
SHA256

9ac92bc25bb24148ddd1e685f4df095871371d752da0108913cc53c2dda23b8b
SHA512

142806052216f60053b167d339f1112fb1ed7acca955f0a38aa450a065f510064192f07782ec8a261b28afde5de9912c457c24471f33c7c411daf43d0795f236
SSDEEP

24576:BambUq0p5xrlbiryv8mzTYxQBUF1MxD7fI08EovqODa1YpNDA/CiN:b0p5Flbiev8mfYf1W8E2qqpNDA6iN

Score

N/A

Malware Config

Signatures

Files

9ac92bc25bb24148ddd1e685f4df095871371d752da0108913cc53c2dda23b8b
.exe windows x86

78a43fa6de5d33d58ec01967ff369331

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
RtlUnwind
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapAlloc
ExitProcess
VirtualAlloc
VirtualQuery
HeapReAlloc
HeapSize
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetFileTime
SetErrorMode
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringW
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
GetFileSizeEx
GetFileAttributesW
IsValidCodePage
FindResourceExW
GetFullPathNameW
GetVolumeInformationW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
lstrlenA
VirtualProtect
GetModuleHandleA
MulDiv
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalUnlock
GlobalFree
FreeResource
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
GetModuleFileNameA
GetSystemInfo
WaitForSingleObject
MapViewOfFile
GetCurrentProcessId
CreateEventW
DuplicateHandle
UnmapViewOfFile
GetProcessHeap
HeapFree
OpenProcess
TerminateProcess
GlobalMemoryStatusEx
DeleteFileW
WideCharToMultiByte
WriteFile
MultiByteToWideChar
TerminateThread
CreateThread
DeleteCriticalSection
GetLogicalDrives
GetDriveTypeW
CreateFileW
DeviceIoControl
GetPrivateProfileSectionW
GetModuleHandleW
SetLastError
GetTickCount
FreeLibrary
GetPrivateProfileSectionNamesW
LoadResource
LockResource
SizeofResource
FindResourceW
lstrcpyW
CreateMutexW
CloseHandle
InterlockedDecrement
GetLastError
InitializeCriticalSection
EnterCriticalSection
FormatMessageW
LocalFree
CreateDirectoryW
LeaveCriticalSection
GetPrivateProfileIntW
LoadLibraryW
GetProcAddress
lstrcatW
GetCurrentProcess
Sleep
GetVersionExW
ExpandEnvironmentStringsW
SetFileAttributesW
GetPrivateProfileStringW
WritePrivateProfileStringW
lstrlenW
OutputDebugStringW
GetOEMCP
GetModuleFileNameW

user32

SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
CharUpperW
GetSysColorBrush
ReleaseCapture
SetCapture
DestroyMenu
GetAsyncKeyState
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowWindow
SetWindowTextW
IsDialogMessageW
SetWindowContextHelpId
MapDialogRect
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
InvalidateRgn
TrackPopupMenu
SetMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
CopyRect
PtInRect
wsprintfW
GetClassInfoW
SendMessageW
FindWindowW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
ValidateRect
SetMenuItemBitmaps
PostThreadMessageW
RegisterClipboardFormatW
GetMenuCheckMarkDimensions
GetFocus
GetNextDlgGroupItem
MessageBeep
UnregisterClassW
UnhookWindowsHookEx
ExitWindowsEx
GetClientRect
IsWindow
ScreenToClient
GetWindowRect
GetSysColor
GetSystemMetrics
OffsetRect
MoveWindow
GetCursorPos
LoadImageW
DrawIcon
DeleteMenu
AppendMenuW
GetSubMenu
LoadMenuW
GetSystemMenu
IsIconic
SetTimer
GetParent
SetForegroundWindow
EnableWindow
LoadIconW
DispatchMessageW
TranslateMessage
PeekMessageW
PostMessageW
GetDlgItem
MessageBoxW
KillTimer
MsgWaitForMultipleObjects
UpdateWindow
LoadBitmapW
LoadCursorW
EqualRect
GetDC
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
InvalidateRect
ReleaseDC

gdi32

GetMapMode
GetBkColor
GetRgnBox
EnumFontFamiliesExW
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetTextColor
CreateFontW
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateRectRgnIndirect
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateFontIndirectW
GetStockObject
BitBlt
CreateCompatibleDC
GetObjectW

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

QueryServiceStatus
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
EnumServicesStatusW
QueryServiceConfigW
ControlService
OpenSCManagerW
OpenServiceW
CloseServiceHandle
StartServiceW
RegCloseKey
RegCreateKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
LookupAccountNameW
IsValidSid
LsaOpenPolicy
LsaEnumerateAccountRights
LsaFreeMemory
LsaClose
LsaAddAccountRights
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW
Shell_NotifyIconW
SHGetFileInfoW

comctl32

ord17

shlwapi

PathStripToRootW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
StrTrimA
PathIsUNCW

oledlg

OleUIBusyW

ole32

CLSIDFromProgID
CoRegisterMessageFilter
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitializeEx
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
SysAllocString

urlmon

CreateURLMoniker

wsock32

WSACleanup
WSASetLastError
WSAStartup
ntohs
connect
listen
accept
send
bind
recvfrom
select
__WSAFDIsSet
recv
htonl
gethostbyname
inet_addr
htons
sendto
ntohl
closesocket
ioctlsocket
socket
setsockopt

psapi

GetProcessMemoryInfo

iphlpapi

SendARP

vixdisklib

VixDiskLib_Disconnect
VixDiskLib_Open
VixDiskLib_Exit
VixDiskLib_Connect
VixDiskLib_Init
VixDiskLib_GetInfo
VixDiskLib_FreeInfo
VixDiskLib_Close
VixDiskLib_GetErrorText
VixDiskLib_Clone

ws2_32

WSAIoctl

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 805KB - Virtual size: 805KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78a43fa6de5d33d58ec01967ff369331

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wsock32

psapi

iphlpapi

vixdisklib

ws2_32

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 109KB - Virtual size: 109KB

.data Size: 12KB - Virtual size: 87KB

.rsrc Size: 805KB - Virtual size: 805KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 109KB - Virtual size: 109KB

.data
Size: 12KB - Virtual size: 87KB

.rsrc
Size: 805KB - Virtual size: 805KB