ba72631370e1125cfb38b5c951a4e079e1d492789bdf5562fa4a40b463b60420

Sharing

Copy URL Twitter E-mail

General

Target

ba72631370e1125cfb38b5c951a4e079e1d492789bdf5562fa4a40b463b60420
Size

924KB
MD5

30a771446bb086dfa436f79655a1adf9
SHA1

38f4adf5380f204661631624ca6c1d0f3bf139bd
SHA256

ba72631370e1125cfb38b5c951a4e079e1d492789bdf5562fa4a40b463b60420
SHA512

4b443a18c7dffd2ef08e7b24b7e8f19c587847b1d84237c04f0f83439dd2f04488d62a287a21e80e521ed87357012560a2f8826af7a3598260a56e3da77d96b2
SSDEEP

24576:jbB+M+LG5CPHwNNNNNNR1dlNZV3woEbbbbGOgOp:tQHwNNNNNNR1dlNZV3woEbbbbGOgy

Score

N/A

Malware Config

Signatures

Files

ba72631370e1125cfb38b5c951a4e079e1d492789bdf5562fa4a40b463b60420
.exe windows x86

4b65e3f122fb45931a2cbf6f68a229a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapAlloc
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapFree
GetProfileStringA
RaiseException
ExitProcess
GetCommandLineA
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesA
GetFullPathNameA
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
SetErrorMode
FindResourceExA
GetCurrentDirectoryA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetLastError
GlobalAlloc
lstrcmpA
GetCurrentThread
GlobalFree
LocalFree
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
ReadFile
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetSystemTime
TerminateProcess
GetDriveTypeA
WritePrivateProfileStringA
SetSystemPowerState
GetCurrentProcess
CreateFileA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
GetModuleFileNameA
GetProcAddress
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetPrivateProfileIntA
GetPrivateProfileStringA
CreatePipe
GetStartupInfoA
CreateProcessA
CloseHandle
HeapDestroy

user32

GetDlgItemTextA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
LoadStringA
CreateDialogIndirectParamA
EndDialog
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
GetAsyncKeyState
MapDialogRect
GetClassNameA
GetSysColorBrush
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
InsertMenuA
GetKeyState
RemoveMenu
ReleaseCapture
GetCursorPos
IsIconic
GetSystemMetrics
DrawIcon
SetWindowRgn
LoadBitmapA
LoadIconA
ExitWindowsEx
LoadCursorA
CopyIcon
IsWindow
GetMessagePos
ScreenToClient
PtInRect
SetTimer
MessageBeep
SetWindowLongA
KillTimer
PeekMessageA
DispatchMessageA
EnableWindow
FrameRect
LoadMenuA
DestroyMenu
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
CharNextA
IsWindowUnicode
LoadImageA
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
GetSysColor
FillRect
DrawStateA
OffsetRect
GetClientRect
CopyRect
InflateRect
DrawFocusRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMenu
UpdateWindow
GetWindowRect
GetSubMenu
TrackPopupMenuEx
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
SendMessageA
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyWindow

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
SetMapMode
GetDeviceCaps
CreatePen
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
DPtoLP
EnumFontFamiliesExA
SetBkMode
RestoreDC
SaveDC
GetClipBox
CreateRoundRectRgn
GetTextExtentPoint32A
CreateFontIndirectA
GetObjectA
GetPixel
SetPixel
CreateBitmap
SelectObject
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
CreateDIBitmap
GetTextExtentPointA
DeleteObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
DragQueryFileA
ShellExecuteA
ShellExecuteExA

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

winmm

PlaySoundA

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 692KB - Virtual size: 691KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b65e3f122fb45931a2cbf6f68a229a9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

winmm

Sections

.text Size: 164KB - Virtual size: 162KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 24KB - Virtual size: 37KB

.rsrc Size: 692KB - Virtual size: 691KB

.text
Size: 164KB - Virtual size: 162KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 24KB - Virtual size: 37KB

.rsrc
Size: 692KB - Virtual size: 691KB