741fb3855a05b0944d69ecdcd9d1753a0dcbc6f55b0c1fe2520a10615917d19d

Sharing

Copy URL Twitter E-mail

General

Target

741fb3855a05b0944d69ecdcd9d1753a0dcbc6f55b0c1fe2520a10615917d19d
Size

648KB
MD5

d409971767245ab822000646310c49c7
SHA1

09f4c241a03f04ae8e8f97d0505eb8e8224b32b1
SHA256

741fb3855a05b0944d69ecdcd9d1753a0dcbc6f55b0c1fe2520a10615917d19d
SHA512

7271bfa21e4c17e4c83f3763044529f6fc4c26c26941329d59b4b14fc6e6b9eeba3e2f8ae778304a8b292ea588670ee0b0daeb4ea635de3799d60b25906a0505
SSDEEP

12288:jhDlshrNP7mny06w3AY2K0NB7nKTHrwGl2ttu3QJG3ucOWCX:VDlshB7mf2KsiHrwdLJG3ucDCX

Score

N/A

Malware Config

Signatures

Files

741fb3855a05b0944d69ecdcd9d1753a0dcbc6f55b0c1fe2520a10615917d19d
.exe windows x86

0262fc0139c9632d4a90521acb5e2b82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmail_ssleay32

ord75
ord5
ord24
ord78
ord87
ord177
ord96
ord8
ord74
ord43
ord108
ord48
ord183
ord112
ord30
ord12
ord110

winmail_libeay32

ord485

ws2_32

gethostname
WSAStartup
WSACleanup
gethostbyaddr
gethostbyname
socket
closesocket
shutdown
inet_addr
inet_ntoa
setsockopt
connect
htons
recv
select
send

wldap32

ord143
ord46
ord45

kernel32

GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsFree
TlsGetValue
GlobalFlags
WritePrivateProfileStringA
GetCurrentDirectoryA
GetProcessVersion
SizeofResource
GetThreadLocale
GetCPInfo
GetOEMCP
SetErrorMode
TlsAlloc
GlobalHandle
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
UnlockFile
SetEndOfFile
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
DuplicateHandle
LockFile
FileTimeToLocalFileTime
GetFileAttributesA
GetFileSize
GetFileTime
RaiseException
GetLastError
LocalAlloc
lstrcpynA
GetLocalTime
GetDriveTypeA
HeapFree
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
TerminateProcess
HeapReAlloc
HeapSize
GetACP
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FormatMessageA
MulDiv
SetLastError
FreeLibrary
LocalFree
LoadLibraryA
GlobalGetAtomNameA
GetVersion
lstrcatA
lstrcpyA
GlobalAddAtomA
GlobalFindAtomA
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
InterlockedDecrement
WideCharToMultiByte
lstrlenA
GlobalFree
InterlockedIncrement
GlobalUnlock
LoadResource
LockResource
FindResourceA
GlobalLock
lstrcmpA
GlobalAlloc
GlobalDeleteAtom
GetCurrentThreadId
lstrcmpiA
GetCurrentThread
GetPrivateProfileStringA
GetTickCount
Sleep
RtlUnwind
DeleteCriticalSection
InterlockedExchange
GetModuleFileNameA
CopyFileA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
CloseHandle
ReleaseMutex
GetTimeZoneInformation
CreateMutexA
GetSystemTime
FileTimeToSystemTime
GetProfileStringA

user32

ScreenToClient
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetDesktopWindow
GetClassNameA
PtInRect
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
RegisterClassA
RegisterClipboardFormatA
PostThreadMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
LoadStringA
EndDialog
SetActiveWindow
IsWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
PostMessageA
RedrawWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
LoadImageA
SendMessageA
EnableWindow
MessageBoxA
CopyRect
InflateRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
CharUpperA
GetSubMenu
GetMenu
GetMenuItemCount
GetMenuItemID
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
GetClassLongA
DefWindowProcA
CreateWindowExA
GetPropA
SetPropA
UnhookWindowsHookEx
GetMessageTime
CallWindowProcA
RemovePropA
SetForegroundWindow
GetMessagePos
GetForegroundWindow
OffsetRect
SetWindowLongA
RegisterWindowMessageA
InvalidateRect
IntersectRect
DestroyWindow
CreateDialogIndirectParamA
GetMessageA
GetNextDlgTabItem
wsprintfA
DefDlgProcA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
UnregisterClassA
IsWindowUnicode

gdi32

GetTextExtentPointA
CreateCompatibleDC
PatBlt
GetMapMode
LPtoDP
DPtoLP
GetBkColor
GetTextColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
SetBkColor
GetObjectA
SetTextColor
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
BitBlt
CreateDIBitmap
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateBitmap
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

OpenSCManagerA
OpenServiceA
ControlService
RegCloseKey
CloseServiceHandle
ChangeServiceConfigA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
QueryServiceStatus
RegCreateKeyExA

comctl32

ord17

oledlg

ord8

ole32

CoRevokeClassObject
OleFlushClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 320KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0262fc0139c9632d4a90521acb5e2b82

Headers

File Characteristics

Imports

winmail_ssleay32

winmail_libeay32

ws2_32

wldap32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 320KB - Virtual size: 317KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 20KB - Virtual size: 36KB

.rsrc Size: 244KB - Virtual size: 241KB

.text
Size: 320KB - Virtual size: 317KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 20KB - Virtual size: 36KB

.rsrc
Size: 244KB - Virtual size: 241KB