64d52ba517258df6106dbf945429b92c1f118f0014853645a33f78e94c31e63e

Sharing

Copy URL Twitter E-mail

General

Target

64d52ba517258df6106dbf945429b92c1f118f0014853645a33f78e94c31e63e
Size

2.3MB
MD5

d40866ac1e3ea7e1f469eec3af8bff95
SHA1

77c27364cbb0ab681f4a479bab3aa8df8b7963b8
SHA256

64d52ba517258df6106dbf945429b92c1f118f0014853645a33f78e94c31e63e
SHA512

482d15569dd945b499d89705d45177dc2854b892e2df3ed413783f8919fd2e778bc8dcda01f2de1ac496690944b22df4f4659d14d8e94133e756b3e41d18a40f
SSDEEP

49152:3XVmjqkyCQW1Hq62DnVY7MMMMMMM3MMMMMMMMMjMMMMMMMMMXEb4ONCyTrUQ:HeD1HqzDnVwMMMMMMM3MMMMMMMMMjMMo

Score

1^/10

Malware Config

Signatures

Files

64d52ba517258df6106dbf945429b92c1f118f0014853645a33f78e94c31e63e
.exe windows x86

08cd8c550a7354f6c49eac92b35ede59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

wsock32

WSAIsBlocking
WSAStartup
WSACleanup
closesocket
recv
ioctlsocket
inet_addr
gethostbyname
gethostname
inet_ntoa
bind
send
getsockname
WSAGetLastError
listen
WSAAsyncSelect
htons
connect
WSASetLastError
accept
htonl
socket

wininet

HttpOpenRequestA
InternetGetLastResponseInfoA
HttpSendRequestA
FtpOpenFileA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenUrlA
InternetCloseHandle
InternetGetConnectedState
InternetOpenA

netapi32

Netbios

kernel32

FindResourceExA
lstrcpyW
SetErrorMode
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
HeapFree
GlobalSize
HeapReAlloc
SetCurrentDirectoryA
LocalReAlloc
GetOEMCP
GetSystemTimeAsFileTime
GetFileType
GetFileInformationByHandle
PeekNamedPipe
GetStartupInfoA
GetCommandLineA
RemoveDirectoryA
HeapAlloc
HeapCompact
HeapSize
TlsGetValue
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
TlsFree
SetEnvironmentVariableA
TerminateProcess
TlsSetValue
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
GlobalAlloc
GlobalLock
GlobalUnlock
CreateThread
SetThreadPriority
ResumeThread
Sleep
lstrcmpA
LoadLibraryA
GetProcAddress
CreateFileA
GetVolumeInformationA
GetVersionExA
GlobalMemoryStatus
GetSystemInfo
FindResourceA
LoadResource
LockResource
GlobalReAlloc
GlobalHandle
TlsAlloc
GetFileTime
GetProcessVersion
GlobalFlags
GetProfileIntA
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetStringTypeExA
GetShortPathNameA
GetThreadLocale
UnlockFile
GetFullPathNameA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
MulDiv
ReadFile
DuplicateHandle
LocalAlloc
SuspendThread
SetLastError
lstrcmpiA
lstrcpynA
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
ResetEvent
GetModuleHandleA
CreateEventA
MoveFileA
WaitForSingleObject
SetEvent
ExitThread
GetExitCodeThread
TerminateThread
SetThreadLocale
InterlockedDecrement
InterlockedIncrement
CreateFileMappingA
GetCurrentThreadId
GetCurrentDirectoryA
UnmapViewOfFile
GetFileSize
MapViewOfFile
_lopen
FormatMessageA
LocalFree
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetLocalTime
_lclose
GetCurrentProcess
GetSystemDirectoryA
GetTickCount
CreateDirectoryA
GetTempFileNameA
GetWindowsDirectoryA
GetTempPathA
HeapCreate
GetDriveTypeA
ExitProcess
GlobalFree
CreateProcessA
GetDiskFreeSpaceA
GetModuleFileNameA
GetFileAttributesA
GetDateFormatA
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
GetNumberFormatA
FreeLibrary
GetTimeFormatA
GetLocaleInfoA
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
InitializeCriticalSection
FindNextFileA
lstrlenW
FindClose
GetCPInfo
WriteFile
lstrlenA
GetVersion
CloseHandle
CopyFileA
GetLastError
lstrcpyA
FindFirstFileA
SearchPathA
VirtualAlloc
lstrcatA
IsBadWritePtr
GetACP
SetStdHandle
SetUnhandledExceptionFilter

user32

GetMessagePos
ReuseDDElParam
UnpackDDElParam
GetAsyncKeyState
IsRectEmpty
ShowOwnedPopups
SetParent
SetWindowContextHelpId
CountClipboardFormats
GetSystemMenu
CopyAcceleratorTableA
FindWindowA
GetTabbedTextExtentA
PostThreadMessageA
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
InvertRect
RegisterClassA
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
LoadAcceleratorsA
TranslateAcceleratorA
GetLastActivePopup
GetForegroundWindow
GetWindow
IntersectRect
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
SetMenuDefaultItem
TrackPopupMenu
MsgWaitForMultipleObjects
GetFocus
PtInRect
MessageBeep
SetWindowPos
GetWindowPlacement
GetWindowDC
EnumDisplaySettingsA
CreateWindowExA
MapVirtualKeyA
DefWindowProcA
CallNextHookEx
UnhookWindowsHookEx
GetClassNameA
ExitWindowsEx
FindWindowExA
TranslateMessage
DispatchMessageA
MessageBoxA
SetClipboardViewer
ChangeClipboardChain
GetMessageTime
DestroyMenu
RegisterClipboardFormatA
SetForegroundWindow
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
GetClassInfoA
IsClipboardFormatAvailable
CheckMenuItem
IsMenu
wsprintfA
GetCursorPos
ScreenToClient
GetKeyState
SetRectEmpty
SetCursorPos
EnableMenuItem
IsZoomed
IsIconic
DrawIcon
ShowScrollBar
LoadIconA
PeekMessageA
LoadBitmapA
DeleteMenu
RemoveMenu
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenuState
ModifyMenuA
InsertMenuA
AppendMenuA
DrawTextA
DrawIconEx
DrawEdge
SystemParametersInfoA
GetMenuItemInfoA
MapDialogRect
GetDesktopWindow
UpdateWindow
GetDC
ReleaseDC
SetTimer
GetSystemMetrics
GetParent
ReleaseCapture
SetCapture
KillTimer
ClientToScreen
WindowFromPoint
FillRect
InvalidateRect
GetClientRect
SetRect
DrawStateA
CopyRect
FrameRect
InflateRect
GetSysColor
DrawFocusRect
DestroyCursor
LoadImageA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetIconInfo
RedrawWindow
DestroyIcon
LoadCursorA
SetCursor
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
CharNextA
LoadStringA
CharUpperA
GrayStringA
TabbedTextOutA
EndPaint
GetMessageA
ValidateRect
wvsprintfA
BringWindowToTop
LoadMenuA
GetMenu
SetMenu
SetClipboardData
SendMessageA
IsWindowVisible
GetWindowLongA
SetWindowLongA
IsWindowEnabled
GetActiveWindow
SetActiveWindow
OffsetRect
GetWindowRect
PostQuitMessage
IsWindow
PostMessageA
EnableWindow
SetWindowsHookExA
RegisterWindowMessageA
BeginPaint
UnregisterClassA

gdi32

GetPixel
CreateCompatibleDC
BitBlt
GetObjectA
SelectObject
DeleteObject
CreateSolidBrush
GetTextExtentPoint32W
GetTextExtentPoint32A
CreateCompatibleBitmap
SetPixel
DeleteDC
Ellipse
PatBlt
GetTextMetricsA
CreateDIBSection
GetNearestColor
RealizePalette
DPtoLP
GetStockObject
CreateBitmap
GetDeviceCaps
GetClipBox
SetTextColor
StartDocA
SaveDC
SetBkColor
SetBkMode
SetPolyFillMode
SelectPalette
SetStretchBltMode
SetMapMode
SetROP2
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SelectClipRgn
ExcludeClipRect
ScaleWindowExtEx
MoveToEx
IntersectClipRect
SetTextAlign
LineTo
GetCurrentPositionEx
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
CreatePatternBrush
TextOutA
ExtTextOutA
RectVisible
CreateRectRgnIndirect
GetMapMode
Escape
CombineRgn
GetTextColor
SetRectRgn
StretchDIBits
GetCharWidthA
GetBkColor
CreateDCA
Rectangle
CreateFontA
AbortDoc
EndDoc
GetViewportOrgEx
StartPage
SetAbortProc
EndPage
LPtoDP
GetStretchBltMode
CopyMetaFileA
GetTextAlign
GetROP2
GetPolyFillMode
GetWindowOrgEx
EnumFontFamiliesExA
GetTextFaceA
ScaleViewportExtEx
RestoreDC
GetBkMode
CreatePen
CreateFontIndirectA

comdlg32

FindTextA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
ChooseFontA
ChooseColorA
CommDlgExtendedError
ReplaceTextA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

InitiateSystemShutdownA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
GetUserNameA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA

shell32

ExtractIconA
DragAcceptFiles
Shell_NotifyIconA
SHChangeNotify
SHGetMalloc
SHGetDesktopFolder
DragQueryFileA
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
DragFinish

comctl32

ImageList_Create
ImageList_GetIcon
ImageList_Destroy
ImageList_LoadImageA
CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ord17
ImageList_SetBkColor
_TrackMouseEvent
ImageList_Draw
ImageList_AddMasked
ImageList_ReplaceIcon

oledlg

ord8
ord11
ord4
ord3

ole32

CreateGenericComposite
CreateItemMoniker
CreateStreamOnHGlobal
WriteClassStg
CoGetClassObject
ReadClassStg
ReadFmtUserTypeStg
OleSaveToStream
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
CreateFileMoniker
CoRevokeClassObject
WriteFmtUserTypeStg
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoTreatAsClass
SetConvertStg
CreateBindCtx
OleDuplicateData
CoTaskMemAlloc
CoDisconnectObject
OleRegGetUserType
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleGetClipboard
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
CoCreateInstance
StringFromCLSID
OleSetMenuDescriptor

olepro32

ord253

oleaut32

VarBstrFromDate
VariantTimeToSystemTime
LoadTypeLi
SysStringLen
VarDateFromStr
VariantClear
SysAllocStringByteLen
SysFreeString
VariantCopy
VariantChangeType
SysAllocStringLen
SysAllocString

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 916KB - Virtual size: 950KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08cd8c550a7354f6c49eac92b35ede59

Headers

File Characteristics

Imports

winmm

wsock32

wininet

netapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.sdata Size: 4KB - Virtual size: 8B

.rdata Size: 212KB - Virtual size: 209KB

.data Size: 44KB - Virtual size: 68KB

.rsrc Size: 916KB - Virtual size: 950KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.sdata
Size: 4KB - Virtual size: 8B

.rdata
Size: 212KB - Virtual size: 209KB

.data
Size: 44KB - Virtual size: 68KB

.rsrc
Size: 916KB - Virtual size: 950KB