ba3c4c25f54f0c7cb5d87007442b204a24428daeaadc01ebebed4190323f60f7

Sharing

Copy URL Twitter E-mail

General

Target

ba3c4c25f54f0c7cb5d87007442b204a24428daeaadc01ebebed4190323f60f7
Size

373KB
MD5

5a3009243b5adb4fef4b0f59aaa0933d
SHA1

d6dd77e16f5c61792bee90467b4af3e6814eaca1
SHA256

ba3c4c25f54f0c7cb5d87007442b204a24428daeaadc01ebebed4190323f60f7
SHA512

9508d8ca08cbeb90b283764a69eea9f5bc0d14577e9e012ba9ab34088c010ae43605a0b0d29f81f0fc51118371ffd8540a1ca87aece34aabd4c1410c67ec7782
SSDEEP

6144:VnjPRtozpZJV7ty3gI7M1vCMgzBFfVz1k8RZSWE3eWo9aVNvRlWMk0msY6:VjPRtozpZJeM16Mcz/RZSWE3dNvRlWM3

Score

N/A

Malware Config

Signatures

Files

ba3c4c25f54f0c7cb5d87007442b204a24428daeaadc01ebebed4190323f60f7
.exe windows x86

05161de88e33a1a35c0175f484901c3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationA
GetFullPathNameA
SetErrorMode
GetFileSizeEx
GetFileTime
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
ExitProcess
HeapAlloc
HeapFree
GetCommandLineA
GetStartupInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
HeapSize
GetACP
IsValidCodePage
GetStdHandle
GetCurrentProcess
VirtualFree
HeapCreate
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTimeZoneInformation
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
MoveFileA
WritePrivateProfileStringA
GetThreadLocale
GetModuleHandleW
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
FileTimeToLocalFileTime
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
MultiByteToWideChar
lstrcmpW
GetVersionExA
GetTickCount
GetFileSize
FileTimeToSystemTime
WriteFile
SetFileTime
GetCurrentDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
CloseHandle
CreateFileA
SetFilePointer
GetEnvironmentVariableA
FindNextFileA
lstrlenW
CreateDirectoryA
FindFirstFileA
FindClose
GetModuleFileNameA
GetFileAttributesA
FreeResource
GlobalFree
GlobalAlloc
GlobalReAlloc
Sleep
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
InitializeCriticalSectionAndSpinCount
lstrcpyA

user32

IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
EndDialog
PostQuitMessage
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
GetWindowThreadProcessId
DestroyMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringA
DrawTextExA
TabbedTextOutA
GetMenuStringA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
SetWindowsHookExA
CallNextHookEx
CopyAcceleratorTableA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SendMessageA
PostMessageA
GetClientRect
GetParent
GetWindowLongA
SetWindowLongA
SetWindowPos
IntersectRect
GetWindowPlacement
GetWindowRect
GetWindow
GetDesktopWindow
wsprintfA
LoadIconA
IsIconic
GetSystemMenu
DrawIcon
CharNextA
CharUpperA
UnregisterClassA
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
CreateDialogIndirectParamA
GetClassLongA
GetNextDlgTabItem
EnableWindow
CopyRect
PtInRect
SetRect
InflateRect
OffsetRect
DrawFrameControl
DrawTextA
CreatePopupMenu
AppendMenuA
ClientToScreen
ScreenToClient
UpdateWindow
InvalidateRect
SetTimer
KillTimer
GetCapture
SetCapture
GetFocus
IsChild
LoadCursorA
GetSysColor
SetCursor
GetMessagePos
GetSystemMetrics
GetCursor
DispatchMessageA
ReleaseCapture
GetMessageA
DrawStateA
LoadBitmapA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSubMenu
ModifyMenuA
SystemParametersInfoA
GetTabbedTextExtentA

gdi32

ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
SetWindowExtEx
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePen
GetStockObject
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
MoveToEx
LineTo
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
DeleteObject
GetObjectA
CreateFontIndirectA
GetTextExtentPoint32A
BitBlt
CreateCompatibleDC
CreateRectRgnIndirect
CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
VariantClear

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05161de88e33a1a35c0175f484901c3b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 269KB - Virtual size: 268KB

.rdata Size: 66KB - Virtual size: 66KB

.data Size: 11KB - Virtual size: 25KB

.rsrc Size: 26KB - Virtual size: 25KB

.text
Size: 269KB - Virtual size: 268KB

.rdata
Size: 66KB - Virtual size: 66KB

.data
Size: 11KB - Virtual size: 25KB

.rsrc
Size: 26KB - Virtual size: 25KB