fd01840579eb6af8747ed436847143a4e36c127688c6efe7794ba78a2f43f19e

Sharing

Copy URL Twitter E-mail

General

Target

fd01840579eb6af8747ed436847143a4e36c127688c6efe7794ba78a2f43f19e
Size

1.9MB
MD5

36f3955a4c6a7eed66a67ef2da27055f
SHA1

8410940ff795c3970cb7accf46b12da5e7a55aed
SHA256

fd01840579eb6af8747ed436847143a4e36c127688c6efe7794ba78a2f43f19e
SHA512

d6f5a5969b31351d00335327c4e8e4e707c0db285ad34f9e2f0ae913ed152861d2b4bfbf8a4253e19757c069769f13efb782bf996cb8451d211dd726405c2ce2
SSDEEP

24576:C8HtD5KkvxaL6LyjO7i0YdM4qQ0Ue/twiaxAOlUD6Di8FHAr0TR0cXotX:hHtD74CUe/qfxAOS0iCvtrXoR

Score

N/A

Malware Config

Signatures

Files

fd01840579eb6af8747ed436847143a4e36c127688c6efe7794ba78a2f43f19e
.exe windows x86

a3fea37d9cf7746e2cc8c5da4eca2a51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
WSASetLastError
WSAGetLastError
gethostbyname
inet_addr
WSAAsyncSelect
socket
inet_ntoa
getpeername
getsockname
accept
WSAAsyncGetHostByName
WSACancelAsyncRequest
bind
htonl
closesocket
ntohs
WSAStartup
htons
ioctlsocket
getsockopt
setsockopt
connect
listen
recv
send
shutdown

kernel32

GetOEMCP
GetTickCount
GetProcessVersion
LocalReAlloc
TlsGetValue
GlobalReAlloc
TlsSetValue
ExitThread
HeapFree
HeapReAlloc
RaiseException
RtlUnwind
GetLocalTime
ExitProcess
GetACP
TerminateProcess
HeapSize
GetSystemTime
GetCommandLineA
TlsFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsValidLocale
IsValidCodePage
GetUserDefaultLCID
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
GetThreadLocale
lstrlenW
GlobalHandle
TlsAlloc
SetEndOfFile
LocalAlloc
GlobalFlags
SetErrorMode
SetFileAttributesA
LocalFileTimeToFileTime
GetDiskFreeSpaceA
GetFileTime
GetTempFileNameA
GetFileAttributesA
GetPrivateProfileIntA
lstrcmpA
GlobalFree
FreeLibrary
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
UnhandledExceptionFilter
GetShortPathNameA
EnumDateFormatsA
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpyA
GetTempPathA
CopyFileA
GetDateFormatA
GetTimeFormatA
FindFirstFileA
FindClose
GetFileSize
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageA
DeleteFileA
SetEvent
CloseHandle
ResumeThread
SetThreadPriority
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
GetCurrentDirectoryA
FileTimeToSystemTime
CreateDirectoryA
SetFilePointer
GetTimeZoneInformation
SystemTimeToFileTime
SetFileTime
WaitForSingleObject
IsBadWritePtr
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetModuleHandleA
SetLastError
GetLastError
lstrcpynA
GetStringTypeExA
GetFullPathNameA
SetEnvironmentVariableA
GetVolumeInformationA
GetProfileStringA
LoadLibraryW
MoveFileA
FlushFileBuffers
UnlockFile
LockFile
FileTimeToLocalFileTime
WriteFile
ReadFile
CreateEventA
LocalFree
EnumSystemLocalesA
InterlockedDecrement
InterlockedIncrement
CompareStringA
lstrcmpiA
CompareStringW
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetStringTypeW
GetCPInfo
MultiByteToWideChar
GetStringTypeA
WideCharToMultiByte
GetProcAddress
InterlockedExchange
LoadLibraryA
DuplicateHandle
WaitForMultipleObjects
GetCurrentThread
LoadResource
CreateThread
FindResourceA
MulDiv
LockResource
SizeofResource
GetLogicalDriveStringsA
GetSystemDirectoryA
GetCurrentProcess
GetWindowsDirectoryA
FindNextFileA
GetVersionExA
CreateFileA
lstrlenA
lstrcatA
HeapAlloc
GetStartupInfoA

user32

AppendMenuA
InsertMenuA
IsRectEmpty
GetMenuStringA
FillRect
SetRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
MapDialogRect
GetAsyncKeyState
EndPaint
GetWindowDC
DestroyCursor
SetCursorPos
PtInRect
IsZoomed
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
wvsprintfA
EndDialog
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
InvalidateRect
MapWindowPoints
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
InvertRect
RegisterClassA
GetMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
OffsetRect
IntersectRect
GetWindowPlacement
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
GetSystemMenu
DeleteMenu
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
GetActiveWindow
CallNextHookEx
ValidateRect
SetWindowsHookExA
GetWindowTextLengthA
GetWindowTextA
CharUpperA
LoadStringA
ScreenToClient
GrayStringA
DrawTextA
TabbedTextOutA
InflateRect
GetMenuItemCount
RedrawWindow
RemoveMenu
SetMenuDefaultItem
GetCursorPos
UnionRect
SetActiveWindow
FindWindowExA
DrawAnimatedRects
SetParent
RegisterClipboardFormatA
LockWindowUpdate
GetDCEx
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetClassInfoA
WinHelpA
GetSystemMetrics
ReleaseCapture
GetDesktopWindow
WindowFromPoint
SetCapture
ExitWindowsEx
SetCursor
FindWindowA
GetLastActivePopup
IsIconic
SetForegroundWindow
LoadCursorA
UpdateWindow
GetDC
GetClientRect
ReleaseDC
ClientToScreen
LoadIconA
MessageBeep
wsprintfA
GetKeyState
GetFocus
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LoadMenuA
GetSubMenu
EnableMenuItem
DestroyIcon
GetWindowRect
SystemParametersInfoA
GetParent
IsWindowVisible
LoadBitmapA
EnableWindow
GetMessageA
DispatchMessageA
TranslateMessage
KillTimer
SetTimer
PostThreadMessageA
IsWindow
SendMessageA
RegisterWindowMessageA
UnregisterClassA
RegisterClassExA
PeekMessageA
GetWindowLongA
DefWindowProcA
CreateWindowExA
SetWindowLongA
DestroyWindow
PostMessageA
GetSysColorBrush
GetClassNameA
SetWindowPos
BeginPaint
DefDlgProcA
ExcludeUpdateRgn
DrawIconEx
CreateMenu
LoadStringW
HideCaret
ShowCaret
IsWindowUnicode
SetWindowRgn
EnableScrollBar
InsertMenuItemA
SetMenuItemInfoA
CreatePopupMenu
DrawFrameControl
TrackPopupMenuEx
GetMenuItemInfoA
IsMenu
LoadImageA
CloseWindow
DrawStateA
GetCursor
DrawEdge
DrawFocusRect

gdi32

SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
CreateDIBitmap
GetTextExtentPointA
SetPixelV
StretchDIBits
GetPixel
Polygon
EnumFontFamiliesExA
SetPixel
SetWindowOrgEx
CreateSolidBrush
BitBlt
ScaleWindowExtEx
SelectClipRgn
SetWindowExtEx
IntersectClipRect
ExcludeClipRect
LineTo
SetTextAlign
MoveToEx
DeleteObject
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateRectRgnIndirect
CreatePatternBrush
CombineRgn
SetRectRgn
SetViewportExtEx
GetTextColor
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
SetBkMode
RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetStockObject
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
LPtoDP
GetMapMode
DPtoLP
GetBkColor
GetTextMetricsA
GetDeviceCaps
GetTextExtentPoint32A
ScaleViewportExtEx

comdlg32

GetFileTitleA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
PrintDlgA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegDeleteValueA
AdjustTokenPrivileges
RegSetValueExA
OpenProcessToken
RegCreateKeyA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegCloseKey
LookupPrivilegeValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA

shell32

Shell_NotifyIconA
SHBrowseForFolderA
ExtractIconA
DragAcceptFiles
SHAppBarMessage
SHFileOperationA
DragQueryFileA
DragFinish
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
ShellExecuteExA
SHGetFileInfoA
SHGetPathFromIDListA

comctl32

ImageList_GetImageCount
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_SetOverlayImage
ImageList_Duplicate
CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ImageList_Create
ImageList_Destroy
ord17
ImageList_Draw
ImageList_DragLeave
ImageList_EndDrag
ImageList_AddMasked
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_DragMove
ImageList_LoadImageA
ImageList_SetImageCount
ImageList_DragEnter

oledlg

ord8

ole32

OleIsCurrentClipboard
OleFlushClipboard
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleLockRunning
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor

olepro32

ord253
ord251

oleaut32

SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantChangeType
SysAllocStringByteLen
SysAllocString
SafeArrayGetElemsize
VariantCopy
VariantClear
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3fea37d9cf7746e2cc8c5da4eca2a51

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 244KB - Virtual size: 241KB

.data Size: 32KB - Virtual size: 61KB

.rsrc Size: 148KB - Virtual size: 145KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 244KB - Virtual size: 241KB

.data
Size: 32KB - Virtual size: 61KB

.rsrc
Size: 148KB - Virtual size: 145KB