4bb8d137ae263187e52c1b6b59a099c1e7f77120300377f1d698d1caf549d89a

Sharing

Copy URL Twitter E-mail

General

Target

4bb8d137ae263187e52c1b6b59a099c1e7f77120300377f1d698d1caf549d89a
Size

660KB
MD5

9eff7bc5c35a4a332f83e2b44c69a3df
SHA1

13add4a6bed67572cccd2155dc2bb736f627aefb
SHA256

4bb8d137ae263187e52c1b6b59a099c1e7f77120300377f1d698d1caf549d89a
SHA512

dbde360b1acc88f44f60f61f2a10ce5fe6dd9dfa8b6fc737297747c50336a43c965a7be9bf7bb5870d00e2eca9f87f890596e0f66a7c9db5b1787e44dd7a660d
SSDEEP

12288:+brcpH+Hp84EixQ2u9dp555wMxfRC/rqQIH+WnZ84zj9ydvvpagYgaEaMd7AD06P:eqs0T5fsDss96Pkm

Score

1^/10

Malware Config

Signatures

Files

4bb8d137ae263187e52c1b6b59a099c1e7f77120300377f1d698d1caf549d89a
.exe windows x86

9ac863b00ad6a6d54a1f9ac94e3d1491

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitCommEvent
WriteFile
ClearCommError
ReadFile
OutputDebugStringA
GetOverlappedResult
GetCommState
SetCommState
FormatMessageA
LocalFree
SetCommMask
SetupComm
PurgeComm
SetCommTimeouts
EscapeCommFunction
CreateEventA
GlobalGetAtomNameA
GlobalReAlloc
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
GetModuleFileNameA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
TerminateProcess
GetACP
HeapSize
HeapReAlloc
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapAlloc
HeapFree
GetSystemTime
CopyFileA
lstrcmpiA
WritePrivateProfileStringA
InitializeCriticalSection
CreateThread
CreateDirectoryA
FindNextFileA
GetCurrentProcess
WinExec
CreateFileA
SetPriorityClass
WaitForSingleObject
CloseHandle
ExitThread
InterlockedDecrement
GetSystemDirectoryA
_llseek
_lcreat
GetFileSize
MulDiv
_lwrite
GetProfileStringA
FindFirstFileA
FindClose
GetLastError
FreeLibrary
LoadLibraryA
GetProcAddress
GlobalAddAtomA
GlobalDeleteAtom
lstrlenA
GetTimeZoneInformation
DeleteFileA
SetEndOfFile
GetTickCount
lstrcatA
GetVersionExA
lstrcpyA
GetPrivateProfileStringA
EnterCriticalSection
GetLocalTime
FlushFileBuffers
SetFilePointer
GetOEMCP
GetCPInfo
LeaveCriticalSection
GetPrivateProfileIntA
GlobalUnlock
GlobalFree
GlobalFindAtomA
GetModuleHandleA
GlobalFlags
lstrcmpA
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalHandle
TlsAlloc
CreateProcessA
Sleep
_lopen
_lread
_lclose
GetVersion
DeviceIoControl
GlobalAlloc
GlobalLock
CompareStringA
GlobalSize
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
lstrcpynA
SetLastError
DeleteCriticalSection
GetCurrentThreadId
LocalAlloc
GetSystemTimeAsFileTime

user32

SetCursor
UnpackDDElParam
FreeDDElParam
DefWindowProcA
SetScrollRange
GetAsyncKeyState
ShowCaret
BeginPaint
GetCaretPos
EndPaint
DestroyCaret
CreateCaret
SetCaretPos
DefMDIChildProcA
GetSysColor
FillRect
GetDlgCtrlID
GetDesktopWindow
GetWindowLongA
GetDlgItemTextA
CheckRadioButton
SetDlgItemInt
CheckDlgButton
GetDlgItemInt
IsDlgButtonChecked
GetDlgItem
EnableWindow
EndDialog
GetParent
LoadStringA
DestroyWindow
EnableMenuItem
DeleteMenu
GetSystemMenu
SetWindowLongA
DialogBoxParamA
WinHelpA
ExitWindowsEx
SetFocus
CreateDialogParamA
OpenClipboard
IsWindowEnabled
GetLastActivePopup
GetMenuItemID
GetMenuState
GetMenuItemCount
GetWindowTextA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetSystemMetrics
GetSysColorBrush
GetClassNameA
PtInRect
ClientToScreen
GetNextDlgTabItem
SetMenuItemBitmaps
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetWindowPos
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
CallWindowProcA
SendDlgItemMessageA
GetMenu
RegisterClassA
GetClassInfoA
GetCapture
GetTopWindow
CopyRect
AdjustWindowRectEx
MapWindowPoints
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
EmptyClipboard
SetClipboardData
CloseClipboard
GetClipboardData
ModifyMenuA
IsWindow
KillTimer
EnumChildWindows
InvalidateRect
PostQuitMessage
DefFrameProcA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
CheckMenuItem
SendMessageA
SetWindowTextA
LoadIconA
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
CreateWindowExA
GetWindow
GetWindowRect
MoveWindow
UpdateWindow
SetTimer
GetMessageA
TranslateMDISysAccel
TranslateAcceleratorA
ScrollWindowEx
SetScrollPos
ShowWindow
BringWindowToTop
TranslateMessage
DispatchMessageA
GetClientRect
GetDC
SetRect
InvertRect
ReleaseDC
SetDlgItemTextA
CreateMenu
CreatePopupMenu
AppendMenuA
SetMenu
GetSubMenu
PackDDElParam
PostMessageA
PeekMessageA
LoadKeyboardLayoutA
GetPropA
RemovePropA
ActivateKeyboardLayout
GetKeyboardLayout
wsprintfA
MessageBoxA
GetKeyState
MessageBeep
GetClassLongA
SetPropA
GetFocus

gdi32

MoveToEx
CreateCompatibleDC
CreateBitmap
GetBitmapBits
GetDeviceCaps
GetStockObject
GetCharWidthA
GetTextMetricsA
SetTextColor
SetBkMode
SetBkColor
TextOutA
AbortDoc
PatBlt
StartDocA
EndPage
EndDoc
DeleteDC
CreateDCA
SetDIBitsToDevice
CreateSolidBrush
Rectangle
CreateFontIndirectA
CreatePen
SelectObject
LineTo
DeleteObject
GetObjectA
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SetStretchBltMode
SetAbortProc
StartPage
GetClipBox
Escape
ExtTextOutA
RectVisible
PtVisible

winspool.drv

WritePrinter
EndDocPrinter
DeviceCapabilitiesA
OpenPrinterA
GetPrinterA
ClosePrinter
EnumJobsA
DocumentPropertiesA
StartPagePrinter
StartDocPrinterA
EndPagePrinter

comdlg32

GetOpenFileNameA
ChooseFontA
PrintDlgA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

shell32

SHGetFolderPathA

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
OleRun
CLSIDFromString

oleaut32

SysAllocString
SysFreeString
VariantClear
VariantChangeType
SysStringLen
SysAllocStringLen

comctl32

CreateToolbarEx
ord8
ord17

wsock32

WSACleanup
gethostname
inet_addr
WSAStartup
connect
htons
ioctlsocket
WSAAsyncSelect
WSAGetLastError
socket
closesocket
recv
send
gethostbyname

ciben32

ord7
ord11
ord4
ord12
ord13
ord3
ord15

imm32

ImmSimulateHotKey
ImmIsIME

Sections

.text
Size: 512KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ac863b00ad6a6d54a1f9ac94e3d1491

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wsock32

ciben32

imm32

Sections

.text Size: 512KB - Virtual size: 509KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 80KB - Virtual size: 265KB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: 512KB - Virtual size: 509KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 80KB - Virtual size: 265KB

.rsrc
Size: 32KB - Virtual size: 28KB