7935f15f58be770e4aebd5b66616994e8eb6e98e83956370f22010c045caf489

Sharing

Copy URL

Twitter E-mail

General

Target

7935f15f58be770e4aebd5b66616994e8eb6e98e83956370f22010c045caf489
Size

1.8MB
MD5

11bd941ab34abcb8fd303a01595389d1
SHA1

4feea4e47748569974df111c43e2c4117cf8d07d
SHA256

7935f15f58be770e4aebd5b66616994e8eb6e98e83956370f22010c045caf489
SHA512

f6bcc32b691c478e779cd4ceb37dc770597ae93c0c6d6b552a297ecc15ddf1ddc78d84f0e26ed3484922240a379dda9177838cc432e23a7de4bce18fd1017ed1
SSDEEP

49152:Yan6vpEdiukzJl8ns0dICBOlKRnVAVBIOPTl:Yan6xE0uwJSs0dILKRnVAVKO

Score

1^/10

Malware Config

Signatures

Files

7935f15f58be770e4aebd5b66616994e8eb6e98e83956370f22010c045caf489
.exe windows x86

59d9a8f48caf195c0b164b9ca3302628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStartupInfoA
SetEnvironmentVariableA
GetExitCodeProcess
CreateProcessA
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetACP
HeapSize
RaiseException
GetCommandLineA
GetLocalTime
SetStdHandle
GetSystemTime
ExitProcess
LeaveCriticalSection
GetTimeZoneInformation
HeapReAlloc
TerminateProcess
HeapAlloc
HeapFree
RtlUnwind
CompareStringW
CompareStringA
MultiByteToWideChar
FindNextFileA
FindClose
FindFirstFileA
GetFileAttributesA
GetFullPathNameA
GetCurrentDirectoryA
LoadLibraryA
FindResourceA
LoadResource
LockResource
SizeofResource
GetTempPathA
GetTempFileNameA
FreeLibrary
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
lstrlenA
GetTickCount
GetProfileStringA
GetDriveTypeA
GetFileTime
GetFileSize
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVolumeInformationA
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
DuplicateHandle
ReadFile
GetCurrentProcess
WritePrivateProfileStringA
SetErrorMode
GetThreadLocale
GetOEMCP
TlsGetValue
GetCPInfo
GetProcessVersion
GlobalReAlloc
LocalReAlloc
TlsSetValue
TlsAlloc
TlsFree
GlobalHandle
GetLastError
LocalAlloc
GlobalFlags
LocalFree
lstrcpynA
FormatMessageA
lstrcmpA
InterlockedIncrement
GetCurrentThread
InterlockedDecrement
GlobalGetAtomNameA
lstrcatA
GetCurrentThreadId
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
GetModuleHandleA
GlobalDeleteAtom
lstrcpyA
MulDiv
SetLastError
WideCharToMultiByte
DeleteCriticalSection
WaitForSingleObject
TerminateThread
GetVersion
GlobalAlloc
GetModuleFileNameA
InitializeCriticalSection
CreateThread
GetProcAddress
EnterCriticalSection
Sleep

user32

MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
GetClassNameA
DestroyMenu
LoadStringA
wvsprintfA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
DispatchMessageA
GetFocus
SetActiveWindow
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GrayStringA
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
MapWindowPoints
PeekMessageA
WinHelpA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
LoadIconA
IsIconic
DrawIcon
GetSystemMetrics
GetSystemMenu
AppendMenuA
KillTimer
SetTimer
PostMessageA
SendMessageA
GetWindowLongA
EnableWindow
GetParent
SetCapture
GetCapture
GetActiveWindow
RedrawWindow
InvalidateRect
GetClientRect
DrawFocusRect
DrawStateA
FrameRect
OffsetRect
InflateRect
PtInRect
CopyRect
SetCursor
GetSysColor
ReleaseCapture
LoadImageA
DestroyCursor
GetDC
ReleaseDC
FillRect
SetFocus
IsWindow
ModifyMenuA
ShowCaret
ExcludeUpdateRgn
HideCaret
IsWindowUnicode
UnregisterClassA
DefDlgProcA

gdi32

DeleteObject
CreateDIBSection
BitBlt
SetPixel
FillRgn
LineTo
MoveToEx
ExtCreatePen
GetDIBits
RealizePalette
GetStockObject
SelectPalette
GetDeviceCaps
CreateRectRgn
CreateDCA
SaveDC
CombineRgn
RestoreDC
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
IntersectClipRect
DeleteDC
StretchDIBits
GetViewportExtEx
GetWindowExtEx
PtVisible
ExtTextOutA
Escape
RectVisible
GetMapMode
DPtoLP
GetBkColor
LPtoDP
GetTextColor
CreateDIBitmap
CreateFontA
SetTextAlign
GetPixel
TextOutW
StrokeAndFillPath
CreateHatchBrush
SetBkMode
CreatePen
GetTextExtentPoint32A
BeginPath
EndPath
StrokePath
GetCharWidthA
GetCurrentObject
CreateFontIndirectA
TextOutA
PatBlt
GetObjectA
CreateCompatibleBitmap
SetBkColor
SetTextColor
CreateBitmap
SetStretchBltMode
StretchBlt
CreateCompatibleDC
SelectObject
SelectClipRgn
CreateSolidBrush
CreatePolygonRgn
GetTextExtentPointA
SetMapMode
ExtTextOutW

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
DragFinish
SHGetFileInfoA
DragQueryFileA

comctl32

ImageList_Destroy
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysAllocString

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 210KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 247KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wemghkp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

59d9a8f48caf195c0b164b9ca3302628

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 210KB - Virtual size: 212KB

.data Size: 247KB - Virtual size: 324KB

.rsrc Size: 47KB - Virtual size: 82KB

wemghkp Size: 4KB - Virtual size: 4KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 210KB - Virtual size: 212KB

.data
Size: 247KB - Virtual size: 324KB

.rsrc
Size: 47KB - Virtual size: 82KB

wemghkp
Size: 4KB - Virtual size: 4KB