ba657ca36b3ffed1ec9ff7a1acb0adcb5dde00df321011cf0a7aa0c20c3e482b

Sharing

Copy URL Twitter E-mail

General

Target

ba657ca36b3ffed1ec9ff7a1acb0adcb5dde00df321011cf0a7aa0c20c3e482b
Size

1.4MB
MD5

c0f322d3d2aed16175d4b7bce08baa91
SHA1

1b3198c13f8e0bac3f834e48649b943326ba5895
SHA256

ba657ca36b3ffed1ec9ff7a1acb0adcb5dde00df321011cf0a7aa0c20c3e482b
SHA512

3082bac109b5ea4eb5373a99b15e588cf24fbedd25d252a1d9bcf36b7c60be1d121d83ae92a74a39c30ff7e5289c8d13822bb59b94561e159b1e5e138fec2d88
SSDEEP

24576:g0t7mEsoATj++Yu0m2A/ScxyjEsPLvJQKU9oiEY4OTQUf:rLAV2A7yAsPta974OTx

Score

N/A

Malware Config

Signatures

Files

ba657ca36b3ffed1ec9ff7a1acb0adcb5dde00df321011cf0a7aa0c20c3e482b
.exe windows x86

47d7b00f53c2f6d678e377c1c26d6d61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

SetUnhandledExceptionFilter
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapSize
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
HeapCreate
HeapDestroy
VirtualQuery
GetSystemInfo
VirtualProtect
GetCPInfo
GetStartupInfoW
TerminateProcess
GetModuleHandleA
HeapReAlloc
ExitProcess
UnhandledExceptionFilter
InterlockedCompareExchange
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
Sleep
GetVersionExA
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetSystemTime
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetOEMCP
SetStdHandle
CompareStringA
SetEnvironmentVariableA
CreateFileA
GetLocaleInfoW
VirtualFree
VirtualAlloc
IsBadWritePtr
FlushFileBuffers
WriteFile
ReadFile
CreateFileW
GetFileSize
SetFilePointer
WideCharToMultiByte
GetStringTypeExW
SetEvent
ResetEvent
CreateEventW
ReleaseSemaphore
CreateSemaphoreW
IsBadReadPtr
CompareStringW
MulDiv
GetCurrentProcessId
GetProfileStringW
GlobalFree
LockResource
GlobalAlloc
GlobalUnlock
GlobalLock
lstrcatW
LoadLibraryW
GetProcAddress
lstrcmpW
lstrcpynA
HeapFree
GetCurrentDirectoryW
lstrlenA
FindFirstFileW
GetFullPathNameW
SetLastError
FindClose
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
SetHandleCount
GetModuleHandleW
lstrcpyW
ReleaseMutex
GetCurrentThreadId
GetLastError
CreateMutexW
WaitForSingleObject
CloseHandle
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
lstrlenW
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
SetEndOfFile
GetCommandLineW
RtlUnwind

user32

SetScrollPos
ScrollWindowEx
UnionRect
InvalidateRgn
CharUpperW
DestroyCursor
SetMenuDefaultItem
IsDlgButtonChecked
GetWindowTextLengthW
GetWindowTextW
CreateDialogParamW
CheckDlgButton
EndDialog
CreateIconIndirect
DestroyIcon
SendDlgItemMessageW
KillTimer
SetTimer
GetClassNameW
ModifyMenuW
InflateRect
WindowFromPoint
GetSysColorBrush
FrameRect
GetWindowThreadProcessId
RegisterWindowMessageW
SetRectEmpty
SetCapture
GetWindowDC
DrawIconEx
GetSystemMenu
GetMenuDefaultItem
GetCapture
ClientToScreen
ReleaseCapture
DefFrameProcW
SystemParametersInfoW
SetRect
BeginPaint
DrawTextW
EndPaint
GetSysColor
GetDlgItem
GetNextDlgTabItem
DialogBoxParamW
CharLowerW
BringWindowToTop
GetMessagePos
GetScrollInfo
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetClassLongW
SetClassLongW
EnableMenuItem
DeleteMenu
SetMenuItemInfoW
InsertMenuW
IsMenu
IsDialogMessageW
LoadBitmapW
GetActiveWindow
UpdateWindow
SetWindowPlacement
GetWindowPlacement
IsIconic
SetMenu
PostMessageW
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
GetMenuStringW
DrawMenuBar
RemoveMenu
MapWindowPoints
TrackPopupMenuEx
CreatePopupMenu
GetMenuItemCount
AppendMenuW
GetMenuItemInfoW
MessageBeep
LoadStringA
PostQuitMessage
DefMDIChildProcW
SetFocus
GetFocus
IsChild
ReleaseDC
GetDC
GetSubMenu
InvertRect
EnableWindow
GetCursorPos
DrawFocusRect
GetDlgItemTextW
SetDlgItemTextW
MessageBoxA
TrackPopupMenu
GetSystemMetrics
DrawEdge
MonitorFromPoint
GetMonitorInfoW
FillRect
GetAsyncKeyState
EqualRect
SetClipboardData
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
IsClipboardFormatAvailable
SubtractRect
ScrollDC
MoveWindow
CheckMenuItem
SetDlgItemInt
TranslateMDISysAccel
GetCursor
OffsetRect
PtInRect
CopyRect
EnableScrollBar
SetScrollInfo
AdjustWindowRectEx
GetDlgCtrlID
GetParent
RedrawWindow
IsWindowVisible
ScreenToClient
GetClientRect
DestroyMenu
GetWindowRect
SetWindowPos
IsZoomed
GetMenu
SetWindowTextW
GetWindowLongW
CallWindowProcW
TranslateAcceleratorW
DrawFrameControl
wsprintfW
DefWindowProcW
FindWindowW
SetForegroundWindow
CharNextW
SendMessageW
LoadMenuW
LoadAcceleratorsW
GetClassInfoExW
LoadImageW
RegisterClassExW
DestroyWindow
CreateWindowExW
MessageBoxW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
IsWindow
GetWindow
IsWindowEnabled
ShowWindow
SetWindowLongW
wvsprintfW
InvalidateRect
LoadCursorW
SetCursor
IntersectRect
IsRectEmpty
LoadStringW
UnregisterClassW
GetMenuItemID

gdi32

SetTextColor
ExtTextOutW
SetBkColor
GetViewportOrgEx
CreateFontIndirectW
SetBrushOrgEx
CreatePatternBrush
CreateBitmap
PatBlt
CreateCompatibleBitmap
BitBlt
SaveDC
RestoreDC
SetStretchBltMode
StretchBlt
GetDeviceCaps
GdiFlush
RectVisible
ExcludeClipRect
IntersectClipRect
CreateRectRgnIndirect
CreateSolidBrush
SelectClipRgn
CombineRgn
GetPixel
GetTextExtentPoint32W
SetBkMode
TextOutW
CreatePen
LineTo
SetWindowOrgEx
GetMapMode
GetViewportExtEx
GetWindowExtEx
GetEnhMetaFileHeader
CreateEnhMetaFileW
CloseEnhMetaFile
OffsetWindowOrgEx
PlayEnhMetaFile
DeleteEnhMetaFile
SetPixel
Ellipse
UnrealizeObject
GetTextMetricsW
Rectangle
SetDIBColorTable
StartDocW
AbortDoc
EndDoc
CreateDCW
GetCurrentObject
EndPage
StartPage
ResetDCW
CreateCompatibleDC
GetObjectW
CreateDIBSection
SelectObject
CreateFontW
GetStockObject
DeleteDC
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
LPtoDP
SetMapMode
DPtoLP
MoveToEx
DeleteObject

winspool.drv

GetPrinterW
OpenPrinterW
ClosePrinter

comdlg32

ChooseColorW
PrintDlgW
PageSetupDlgW
GetOpenFileNameW
GetSaveFileNameW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW

shell32

SHGetDesktopFolder
DragAcceptFiles
ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW
DragQueryFileW
DragFinish

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

VarUI4FromStr
OleLoadPicturePath

shlwapi

PathIsDirectoryW
PathCanonicalizeW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
PathIsRelativeW
PathRenameExtensionW

comctl32

InitCommonControlsEx
ImageList_Destroy
ord8
ImageList_GetImageCount
ImageList_Create
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
CreateStatusWindowW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47d7b00f53c2f6d678e377c1c26d6d61

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 160KB - Virtual size: 158KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 180KB - Virtual size: 176KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 160KB - Virtual size: 158KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 180KB - Virtual size: 176KB