e409e4a5c186f98b6e4943326d35ff36d39b7fa86ffd666dca359d33c0bf14ea

Sharing

Copy URL Twitter E-mail

General

Target

e409e4a5c186f98b6e4943326d35ff36d39b7fa86ffd666dca359d33c0bf14ea
Size

1.5MB
MD5

83b97631c11c0811828639d7c4481f34
SHA1

f85a16d6282b279316b2518629f0ccd3c2a08126
SHA256

e409e4a5c186f98b6e4943326d35ff36d39b7fa86ffd666dca359d33c0bf14ea
SHA512

343f684bf95c85daf5f1f6f1d86c96c0d5a2d1047d00afd4150f721e69f74e33d881540b5ff75cc3e6f87bceb1cb9fcd1cf191a14a07f4139647b7bdbd9b21d1
SSDEEP

49152:feBY1gq2ZP3W4xlZOOCsEbp3Y3xXcV4w/n83x5:hgZPmIlZPhEbpo3A4UC

Score

N/A

Malware Config

Signatures

Files

e409e4a5c186f98b6e4943326d35ff36d39b7fa86ffd666dca359d33c0bf14ea
.exe windows x86

a8d85646603eff5a71361f37aa5e62fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

commdll

ClxCommInit

kernel32

RtlUnwind
GetCurrentDirectoryA
CreateDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
SetEnvironmentVariableA
SetStdHandle
GetFileType
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
ExitThread
GetCPInfo
SetErrorMode
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
FindResourceExA
CreateMutexA
CompareStringW
GetOEMCP
LocalReAlloc
GetProcessVersion
TlsGetValue
TlsFree
TlsSetValue
GlobalReAlloc
TlsAlloc
GlobalFlags
GetDiskFreeSpaceA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesA
GetFileTime
SetFileTime
ReleaseMutex
HeapDestroy
HeapCreate
_lcreat
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
CreateThread
GetTickCount
WaitForSingleObject
GetExitCodeThread
GetTempPathA
GetTempFileNameA
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
DeviceIoControl
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
GetSystemInfo
GetLogicalDriveStringsA
GetDriveTypeA
GetVersionExA
_llseek
_lwrite
GetVolumeInformationA
DeleteFileA
MoveFileA
OutputDebugStringA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
GetModuleFileNameA
InterlockedExchange
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynA
SetLastError
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
FlushViewOfFile
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileSize
GlobalMemoryStatus
GetVersion
QueryPerformanceFrequency
QueryPerformanceCounter
SetEndOfFile
SetFilePointer
ReadFile
HeapReAlloc
HeapSize
HeapFree
GetProcessHeap
HeapAlloc
SetCurrentDirectoryA
FormatMessageA
GetCurrentThread
InterlockedExchangeAdd
FindFirstFileA
FindNextFileA
FindClose
WritePrivateProfileSectionA
TerminateProcess
GetLastError
GetSystemDefaultLangID
GetCurrentProcessId
GetPrivateProfileIntA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
GetSystemDirectoryA
GetACP
MulDiv
GetCommandLineA
WritePrivateProfileStringA
lstrcmpiA
GetStartupInfoA
GetPrivateProfileStringA
WriteFile
FindResourceA
LoadResource
SizeofResource
LockResource
ExitProcess
OpenProcess
CreateProcessA
Sleep
lstrcmpA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
_lopen
_lread
_lclose
CompareStringA
SetUnhandledExceptionFilter
GetEnvironmentVariableA

user32

DeleteMenu
AppendMenuA
BringWindowToTop
GetSystemMenu
UnpackDDElParam
ReuseDDElParam
TranslateAcceleratorA
LoadAcceleratorsA
WaitMessage
CharNextA
CharUpperA
MapDialogRect
GetAsyncKeyState
IsZoomed
DestroyMenu
GetMessageA
ValidateRect
TabbedTextOutA
EndPaint
BeginPaint
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
ShowWindow
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetFocus
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
GetWindowTextLengthA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
EnumWindows
RegisterClassA
DrawIconEx
WindowFromPoint
EnableScrollBar
GetFocus
GetCaretPos
DeferWindowPos
GetSysColorBrush
GetDlgCtrlID
IsDialogMessageA
wsprintfA
LoadStringA
UnionRect
GetWindowDC
GetMenuStringA
PostThreadMessageA
SetWindowRgn
GetMenuItemID
GetMenuItemCount
ModifyMenuA
PostQuitMessage
SetWindowPos
GetClassNameA
SetForegroundWindow
SetActiveWindow
IsWindowVisible
FlashWindow
SetMenu
GetMenu
GetWindowThreadProcessId
FindWindowA
GetClassInfoA
DefWindowProcA
SetParent
FrameRect
UnregisterHotKey
RegisterHotKey
GetKeyNameTextA
LoadImageA
CopyIcon
GetMessagePos
PeekMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
SetWindowTextA
GetWindowLongA
SetWindowLongA
MoveWindow
DestroyCursor
DestroyWindow
AdjustWindowRectEx
DestroyIcon
EqualRect
EnableMenuItem
CheckMenuItem
TrackPopupMenu
SetRectEmpty
GetSysColor
MessageBoxA
MessageBeep
RegisterWindowMessageA
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatA
GetDCEx
LockWindowUpdate
CopyAcceleratorTableA
GetTabbedTextExtentA
InvertRect
InsertMenuA
IsIconic
GetSystemMetrics
DrawIcon
LoadIconA
GetKeyState
PostMessageA
GetCursorPos
ScreenToClient
KillTimer
DrawTextA
IsWindow
GetDC
ReleaseDC
GetWindowRect
CopyRect
InflateRect
IntersectRect
InvalidateRect
IsRectEmpty
LoadMenuA
RemoveMenu
GetSubMenu
ClientToScreen
PtInRect
GetCapture
OffsetRect
LoadCursorA
SetCursor
ReleaseCapture
SetCapture
DrawFocusRect
GetDesktopWindow
SetRect
FillRect
UpdateWindow
GetClientRect
LoadBitmapA
GetParent
SetTimer
EnableWindow
GetWindow
SendMessageA
GetNextDlgGroupItem
DlgDirListA
RedrawWindow
GetWindowTextA
DrawFrameControl
GrayStringA
UnregisterClassA

gdi32

BitBlt
GetObjectA
StretchBlt
GetDeviceCaps
CombineRgn
GetTextMetricsA
GetPixel
SetDIBits
RealizePalette
SelectPalette
CreatePalette
RectVisible
RestoreDC
TextOutA
IntersectClipRect
SaveDC
GetTextExtentPointA
FrameRgn
CreatePolygonRgn
GetClipBox
StartDocA
SetPolyFillMode
SetROP2
SetStretchBltMode
SetViewportOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowOrgEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
DeleteDC
GetMapMode
CreatePatternBrush
PtVisible
ExtTextOutA
Escape
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
SetRectRgn
GetBkColor
StretchDIBits
GetCharWidthA
EnumFontFamiliesExA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
SetMapMode
GetViewportExtEx
SetViewportExtEx
GetWindowExtEx
SetWindowExtEx
CreateFontA
CreateRoundRectRgn
GetTextColor
SetPixel
SetBkColor
Ellipse
GetViewportOrgEx
DeleteObject
PatBlt
CreatePenIndirect
CreatePen
Rectangle
CreateFontIndirectA
GetStockObject
SetTextColor
GetTextExtentPoint32A
SetBkMode
SelectObject
LPtoDP
Polygon
CreateCompatibleDC
CreateCompatibleBitmap
DPtoLP
SetBrushOrgEx
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreateBitmap
GetSystemPaletteEntries
UnrealizeObject

comdlg32

GetFileTitleA
PrintDlgA
GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyExA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegEnumKeyA
GetUserNameA
RegCreateKeyExA

shell32

DragFinish
ExtractIconA
DragQueryFileA
ShellExecuteA
SHGetFileInfoA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

DestroyPropertySheetPage
ImageList_GetIconSize
PropertySheetA
CreatePropertySheetPageA
ImageList_Draw
ImageList_AddMasked
ImageList_GetImageCount
ImageList_DrawEx
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA

netapi32

Netbios

wininet

HttpSendRequestA
InternetErrorDlg
HttpOpenRequestA
InternetGetLastResponseInfoA
InternetGetConnectedState
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetSetOptionExA
InternetOpenA
InternetSetOptionA
InternetQueryOptionA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetQueryDataAvailable
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetConnectA

oledlg

ord8

ole32

OleUninitialize
CLSIDFromString
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoTaskMemFree
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal

olepro32

ord251
ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
SysAllocStringByteLen
SafeArrayCreate
SysAllocString
SafeArrayGetElemsize
SysAllocStringLen
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VariantChangeType
VariantCopy
SysFreeString

rpcrt4

UuidCreate

shlwapi

PathMatchSpecA

wsock32

bind
connect
sendto
recvfrom
socket
inet_ntoa
WSAAsyncSelect
send
recv
gethostbyname
closesocket
htonl
setsockopt
ioctlsocket
accept
WSASetLastError
WSAStartup
WSACleanup
htons
WSAGetLastError

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8d85646603eff5a71361f37aa5e62fc

Headers

File Characteristics

Imports

winmm

version

commdll

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

netapi32

wininet

oledlg

ole32

olepro32

oleaut32

rpcrt4

shlwapi

wsock32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 200KB - Virtual size: 197KB

.data Size: 60KB - Virtual size: 83KB

.rsrc Size: 236KB - Virtual size: 236KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 200KB - Virtual size: 197KB

.data
Size: 60KB - Virtual size: 83KB

.rsrc
Size: 236KB - Virtual size: 236KB