GuestGB3127-Path on the map[.]jpg[.]scr

Sharing

Copy URL Twitter E-mail

General

Target

GuestGB3127-Path on the map.jpg.scr
Size

1.5MB
MD5

4de080bcc68cdac92df4062d463e2274
SHA1

788c9f962c74d20a78149750ecc7c00f2dea1872
SHA256

aa47c22a817a5dbbd01356e0dd9fc9d442e8fa841c5a94470f348f722cea14e5
SHA512

ac546fe6e9197fe811108d5009862022b151be9438b0f441bfb66c66f2230fc0f82d0221778c0d2721893dd436cc2083818e471b5d8dc25b1fd9b7ff6ed24184
SSDEEP

24576:ZnusIdVnt3GY6eNcinZL1lzFyUCaN91TZd:ss4Vnt2MNrXyfmTr

Score

N/A

Malware Config

Signatures

Files

GuestGB3127-Path on the map.jpg.scr
.exe windows x86

700bb45f56b812532d36250c87536eae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
CompareStringA
CompareStringW
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetEnvironmentStringsW
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetDriveTypeA
GetLocaleInfoW
GetACP
GetOEMCP
SetEnvironmentVariableA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
UnhandledExceptionFilter
GetFileType
SetStdHandle
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapSize
ExitThread
CreateThread
HeapReAlloc
RaiseException
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetStartupInfoW
SetErrorMode
FindResourceExW
GetCurrentDirectoryW
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
FindNextFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
GetStringTypeExW
GetVolumeInformationW
FindFirstFileW
FindClose
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
GlobalFlags
lstrcmpA
lstrcmpiA
GetCurrentThread
GlobalGetAtomNameW
CreateEventW
SuspendThread
SetEvent
GetDiskFreeSpaceW
GetFileTime
SetFileTime
GetFullPathNameW
GetTempFileNameW
GetFileAttributesW
LoadLibraryA
GetVersion
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GlobalFree
FindResourceW
lstrlenA
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
SetLastError
SizeofResource
LoadResource
LockResource
SetThreadPriority
SetCurrentDirectoryW
FlushFileBuffers
WriteFile
ReadFile
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringW
GetPrivateProfileIntW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetWindowsDirectoryW
GetTickCount
GetModuleFileNameW
CreateProcessW
OpenProcess
TerminateProcess
GetExitCodeProcess
CloseHandle
GetPrivateProfileStringW
GetCurrentProcess
GetTempPathW
CreateDirectoryW
GetFileAttributesExW
GetShortPathNameW
GetLastError
LocalFree
MoveFileW
DeleteFileW
GlobalAlloc
Sleep
GetModuleHandleW
GlobalLock
GlobalUnlock
lstrlenW
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrcpyW
lstrcmpiW
lstrcpynW
GetDriveTypeW
WaitForSingleObject
ResumeThread
IsBadReadPtr
lstrcmpW

user32

IsChild
WinHelpW
GetClassInfoW
RegisterClassW
TrackPopupMenu
GetWindowTextLengthW
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
DefWindowProcW
GetMessageTime
GetLastActivePopup
GetForegroundWindow
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
wsprintfW
UnhookWindowsHookEx
EndPaint
BeginPaint
GetWindowDC
GetMessageW
PeekMessageW
TranslateMessage
DispatchMessageW
GetMenuStringW
FindWindowW
ExitWindowsEx
DestroyIcon
GetWindowTextW
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
DrawFocusRect
IsWindowEnabled
SetFocus
RegisterWindowMessageW
GetWindow
GetDlgCtrlID
SetWindowPos
GetMenuItemCount
DrawFrameControl
LoadIconW
KillTimer
SetTimer
ReleaseDC
CreatePopupMenu
GetMessagePos
RedrawWindow
RemovePropW
GetPropW
CallWindowProcW
GetWindowLongW
SetPropW
SetWindowLongW
GetMenuItemID
SendDlgItemMessageA
DestroyCursor
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
MessageBoxW
GetMenuDefaultItem
OffsetRect
GetCursorPos
ReleaseCapture
GetCapture
SetCursorPos
SetCursor
SetCapture
GrayStringW
DrawTextW
TabbedTextOutW
BeginDeferWindowPos
EndDeferWindowPos
GetKeyState
DeleteMenu
ClientToScreen
ScreenToClient
PtInRect
SendDlgItemMessageW
CheckDlgButton
SetWindowTextW
GetDlgItemInt
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
SetParent
InflateRect
GetFocus
GetSysColor
GetParent
UpdateWindow
PostMessageW
TrackPopupMenuEx
InvalidateRect
IsIconic
SetForegroundWindow
CheckMenuItem
IsWindowVisible
SetClassLongW
GetSystemMenu
InsertMenuW
GetMenu
SetMenu
DestroyMenu
LoadMenuW
GetDC
CopyRect
GetWindowRect
IsWindow
GetClientRect
GetSubMenu
SetMenuDefaultItem
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
LoadBitmapW
SendMessageW
EnableWindow
GetSystemMetrics
GetTopWindow
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetWindowTextA
MapWindowPoints
LockWindowUpdate
GetDCEx
PostThreadMessageW
CharUpperW
GetSysColorBrush
GetClassNameW
LoadStringW
SetRect
MapDialogRect
GetAsyncKeyState
RegisterClipboardFormatW
ShowOwnedPopups
PostQuitMessage
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
GetDesktopWindow
TranslateAcceleratorW
LoadAcceleratorsW
SetRectEmpty
ValidateRect
WindowFromPoint
wvsprintfW
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
EnableMenuItem
ShowWindow
MoveWindow
LoadCursorW
IsDialogMessageW

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
SetMapMode
GetDeviceCaps
CreateSolidBrush
CreatePatternBrush
SetRectRgn
GetCharWidthW
CreateFontW
GetTextMetricsW
EnumFontFamiliesExW
CreateRectRgn
CombineRgn
SetTextColor
SetBkMode
SetBkColor
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
RestoreDC
CreateDIBSection
DeleteDC
PatBlt
DeleteObject
SelectObject
GetBkMode
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
CreateCompatibleBitmap
GetBkColor
GetTextColor
GetTextExtentPoint32W
CreateCompatibleDC
CreateBitmap
GetStockObject
GetObjectW
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
CreateFontIndirectW

comdlg32

GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
SetFileSecurityW
GetFileSecurityW
RegCloseKey

shell32

DragAcceptFiles
SHGetSpecialFolderPathW
ExtractIconW
SHFileOperationW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHGetPathFromIDListW
SHGetDesktopFolder
DragQueryFileW
ShellExecuteW
DragFinish
SHGetMalloc

comctl32

ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_Draw
ImageList_AddMasked
ImageList_GetImageCount
_TrackMouseEvent
ImageList_SetBkColor
ImageList_Destroy
ImageList_Create
ord17
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_DrawIndirect
ImageList_BeginDrag

oledlg

OleUIBusyW

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid

oleaut32

SysAllocString
SysFreeString

shlwapi

PathFindFileNameW
PathIsDirectoryW
PathMakePrettyW
PathFindExtensionW
PathRemoveFileSpecW
PathIsRootW
PathFileExistsW

winhttp

WinHttpQueryHeaders
WinHttpCrackUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpQueryOption
WinHttpSetOption
WinHttpReceiveResponse

Sections

.text
Size: 872KB - Virtual size: 868KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 488KB - Virtual size: 507KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

700bb45f56b812532d36250c87536eae

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

shlwapi

winhttp

Sections

.text Size: 872KB - Virtual size: 868KB

.rdata Size: 148KB - Virtual size: 146KB

.data Size: 488KB - Virtual size: 507KB

.rsrc Size: 4KB - Virtual size: 612B

.text
Size: 872KB - Virtual size: 868KB

.rdata
Size: 148KB - Virtual size: 146KB

.data
Size: 488KB - Virtual size: 507KB

.rsrc
Size: 4KB - Virtual size: 612B