b545bbaddf2b5602d2d6ff499079df0ed1262538f3d47b85a8d2c6d4b66b1084

Sharing

Copy URL Twitter E-mail

General

Target

b545bbaddf2b5602d2d6ff499079df0ed1262538f3d47b85a8d2c6d4b66b1084
Size

1.5MB
MD5

824b73e24b5ebafda06ffed6cc926ead
SHA1

0c16091061ca29c7ad7b86b5b159e83dd350c5e1
SHA256

b545bbaddf2b5602d2d6ff499079df0ed1262538f3d47b85a8d2c6d4b66b1084
SHA512

6cd530c0c25253b49c915e3b42ca9ad6d1ed6d12ed58e4c04a65ab340170317ed61db0a7fc5a0d0d28f61489d4c63e6f4fcad0470c8675ba07a9478d5ba239d7
SSDEEP

24576:z3eQhsSiXnDc+bg3f3su8NzLpRbTEXK9WEXMr42GKOwi9:6QyDc+c3f8u6nBSOL

Score

N/A

Malware Config

Signatures

Files

b545bbaddf2b5602d2d6ff499079df0ed1262538f3d47b85a8d2c6d4b66b1084
.exe windows x86

1a34e872b111d1f0799cb75570ccef26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomA
GetCurrentProcessId
FreeResource
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
FindClose
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
GetModuleFileNameW
InterlockedDecrement
GetModuleHandleW
InterlockedIncrement
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCurrentDirectoryA
GlobalFlags
GetThreadLocale
WriteFile
ResumeThread
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
GetFileSizeEx
GetFileTime
SetErrorMode
RtlUnwind
ExitThread
CreateThread
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
HeapReAlloc
RaiseException
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
HeapCreate
VirtualFree
GetStdHandle
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
lstrcmpA
FreeLibrary
GetProcAddress
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
MulDiv
lstrlenA
CreateFileA
ReadFile
GetOverlappedResult
DeviceIoControl
SetEvent
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
Beep
GetFileAttributesA
SetFileAttributesA
DeleteFileA
GetVersionExA
CreateEventA
_lcreat
_lwrite
_lclose
WaitForSingleObject
CloseHandle
GetTickCount
Sleep
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetModuleHandleA
GetModuleFileNameA
OpenMutexA
SetFilePointer
CreateMutexA

user32

CharUpperA
MessageBeep
SetRect
CharNextA
CopyAcceleratorTableA
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
CreateWindowExA
ReleaseCapture
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
GetSystemMetrics
SetCursor
LoadCursorA
PtInRect
DrawIcon
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
SetCapture
GetSysColorBrush
AppendMenuA
SendMessageA
PostMessageA
GetSystemMenu
IsIconic
GetWindowRect
GetClientRect
UpdateWindow
InvalidateRect
SetTimer
KillTimer
EnableWindow
LoadIconA
MessageBoxA
wsprintfA
ReleaseDC
GetDC
GetActiveWindow
DestroyMenu
EndPaint
BeginPaint
GetClassInfoA
GetWindowDC
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetClassInfoExA

advapi32

RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

shlwapi

PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

imagehlp

MapFileAndCheckSumA

msvfw32

DrawDibDraw
DrawDibOpen
DrawDibClose

oleacc

CreateStdAccessibleObject
LresultFromObject

gdi32

CreateRectRgnIndirect
GetBkColor
GetTextColor
GetRgnBox
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
SaveDC
RestoreDC
SetMapMode
GetStockObject
DeleteDC
DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
GetMapMode
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

ole32

CoRevokeClassObject
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleFlushClipboard
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoRegisterMessageFilter

oleaut32

SysStringLen
SysAllocStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
SysFreeString

Sections

.text
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 908KB - Virtual size: 923KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a34e872b111d1f0799cb75570ccef26

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

oledlg

imagehlp

msvfw32

oleacc

gdi32

winspool.drv

comdlg32

ole32

oleaut32

Sections

.text Size: 458KB - Virtual size: 457KB

.rdata Size: 99KB - Virtual size: 98KB

.data Size: 908KB - Virtual size: 923KB

.rsrc Size: 41KB - Virtual size: 40KB

.text
Size: 458KB - Virtual size: 457KB

.rdata
Size: 99KB - Virtual size: 98KB

.data
Size: 908KB - Virtual size: 923KB

.rsrc
Size: 41KB - Virtual size: 40KB