1b5f7d14907728b3b5390c80542c4d65e4726676493bf5374b4a7534eb774e9e

Sharing

Copy URL Twitter E-mail

General

Target

1b5f7d14907728b3b5390c80542c4d65e4726676493bf5374b4a7534eb774e9e
Size

2.3MB
MD5

07928cca1cc0f53c77a0dc5293f89b75
SHA1

c65bc82b8c945a25779a81b72cf1fcb43a102d6c
SHA256

1b5f7d14907728b3b5390c80542c4d65e4726676493bf5374b4a7534eb774e9e
SHA512

32e083979fd578ffbbba5b23361088de02b66e587e45eb8c98e4ffd7f06164d1e1de07f8f2d2f6debf1b25ca8c0623764eb707754fa146c1f2b4694d1173354c
SSDEEP

49152:XRluosg33liD12JMWB5PZd/khUbkzYzcdEut98MWkYBGR:hluosg33l6Cr/kXzYgaut98M2BGR

Score

1^/10

Malware Config

Signatures

Files

1b5f7d14907728b3b5390c80542c4d65e4726676493bf5374b4a7534eb774e9e
.exe windows x86

74c81563bde6b64f62f4cd597d3f7de8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSASetLastError
WSAGetLastError
accept
ioctlsocket
bind
htons
WSAStartup
closesocket
gethostbyname
recv
send
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
WSACleanup
htonl
shutdown

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiCallClassInstaller
CM_Get_DevNode_Registry_PropertyA
CM_Locate_DevNodeA
CM_Remove_SubTree
SetupDiSetClassInstallParamsA
CM_Get_Sibling
CM_Get_Parent
CM_Get_Child

newdev

UpdateDriverForPlugAndPlayDevicesA

kernel32

GetTickCount
GlobalFree
GetComputerNameA
GetModuleFileNameA
GetSystemDirectoryA
GetDriveTypeA
GetVolumeInformationA
CreateNamedPipeA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
LocalAlloc
SetLastError
lstrlenA
GetWindowsDirectoryA
GetCurrentDirectoryA
SetFileAttributesA
RemoveDirectoryA
FormatMessageA
LocalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcatA
MultiByteToWideChar
GetDiskFreeSpaceExA
GetDriveTypeW
GetVolumeInformationW
WideCharToMultiByte
SetVolumeLabelW
FreeLibrary
LoadLibraryA
FlushFileBuffers
GetVersionExA
DeleteFileA
MoveFileA
DeviceIoControl
SetCurrentDirectoryA
FindFirstFileA
FindNextFileA
GetLastError
FindClose
GetProfileStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
InterlockedExchange
GetLocaleInfoA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
SetHandleCount
VirtualQuery
CreateProcessA
GetLocalTime
GetProcAddress
GetSystemDefaultLangID
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GetFileSize
GetFileAttributesA
CreateDirectoryA
CopyFileA
ResetEvent
SetEvent
WaitForSingleObject
GetCurrentProcess
SetPriorityClass
CreateEventA
CreateThread
SetThreadPriority
WriteFile
ReadFile
CreateFileA
GetCommTimeouts
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
LCMapStringW
LCMapStringA
IsBadWritePtr
SetCommTimeouts
GetCommState
SetCommState
lstrcpyA
OutputDebugStringA
CloseHandle
Sleep
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
RaiseException
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapReAlloc
HeapSize
GetACP
GetFileType
SetStdHandle
ExitThread
GetStartupInfoA
GetProcessHeap
GetCommandLineA
GetDateFormatA
GetTimeFormatA
ExitProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
SetErrorMode
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
GetVersion
LockResource
LoadResource
FindResourceA
InterlockedIncrement
InterlockedDecrement
DuplicateHandle
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
lstrcpynA
GetFullPathNameA
GetThreadLocale
MulDiv
lstrcmpA
ResumeThread
SuspendThread
lstrlenW
GetCurrentThread
GetFileTime
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue

user32

SetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
DestroyWindow
GetDlgCtrlID
GetWindowTextLengthA
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
GetScrollPos
CopyRect
AdjustWindowRectEx
IsWindow
SetActiveWindow
MapWindowPoints
SendDlgItemMessageA
CheckDlgButton
GetDlgItemInt
GetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
MoveWindow
GetNextDlgTabItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
GetActiveWindow
EndDialog
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
WaitMessage
InflateRect
LoadStringA
RegisterWindowMessageA
ValidateRect
GetMessageA
DestroyMenu
IsClipboardFormatAvailable
WindowFromPoint
SetCursor
SetWindowContextHelpId
MapDialogRect
LoadCursorA
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
PostThreadMessageA
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
HideCaret
GetDlgItem
ShowWindow
SetWindowPos
SetFocus
GetDC
SetWindowTextA
SetWindowsHookExA
SetDlgItemTextA
UnhookWindowsHookEx
GetForegroundWindow
SetMenu
GetMenu
LoadMenuA
GetSubMenu
GetMenuState
CheckMenuItem
OpenClipboard
GetClipboardData
CloseClipboard
MessageBoxA
ShowCaret
SetCaretPos
CreateCaret
SetCapture
DrawTextA
PtInRect
EmptyClipboard
RegisterClipboardFormatA
GetKeyState
ReleaseCapture
SetScrollInfo
EnableScrollBar
DragDetect
SetScrollPos
DestroyCaret
LoadIconA
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
FillRect
GetSystemMetrics
GetWindow
PostMessageA
GetWindowLongA
SetWindowLongA
MessageBeep
CallWindowProcA
KillTimer
SetTimer
GetKeyNameTextA
wsprintfA
GetFocus
InvalidateRect
UpdateWindow
GetClientRect
GetWindowRect
DrawFocusRect
RedrawWindow
GetSysColor
SendMessageA
EnableWindow
GetParent
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
LoadBitmapA
LoadImageA
ReleaseDC
PostQuitMessage
IsWindowEnabled
IsWindowVisible
GetWindowTextA
EnumChildWindows
FindWindowA
GetCursorPos
ScreenToClient
GetMenuItemCount
GetMenuItemID
ModifyMenuA
SetClipboardData
GetDesktopWindow
EnumWindows
FindWindowExA
GetClassNameA
CharUpperA
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
UnregisterClassA

gdi32

DPtoLP
CopyMetaFileA
GetTextColor
GetBkColor
LPtoDP
GetTextExtentPointA
CreateDIBitmap
DeleteObject
SetBoundsRect
GetCharWidthA
GetTextExtentPoint32A
TextOutA
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetDeviceCaps
CreateFontA
Rectangle
GetObjectA
CreatePen
CreateFontIndirectA
GetStockObject
GetClipBox
SetTextColor
SetBkColor
PatBlt
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetMapMode
Escape
ExtTextOutA
RectVisible
PtVisible
CreateHatchBrush
GetWindowExtEx
GetViewportExtEx

advapi32

RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA

shell32

SHChangeNotify
SHBrowseForFolderA
ShellExecuteA
SHGetMalloc
SHGetPathFromIDListA

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy

oledlg

ord8

olepro32

ord253

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

ole32

CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
CoRevokeClassObject
OleDuplicateData
CoTaskMemAlloc
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium

oleaut32

SysAllocStringByteLen
VariantTimeToSystemTime
SysStringLen
SysAllocString
SysFreeString
SysAllocStringLen
LoadTypeLi
VariantChangeType
VariantClear
VariantCopy

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74c81563bde6b64f62f4cd597d3f7de8

Headers

File Characteristics

Imports

wsock32

setupapi

newdev

kernel32

user32

gdi32

advapi32

shell32

comctl32

oledlg

olepro32

winspool.drv

comdlg32

ole32

oleaut32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 248KB - Virtual size: 2.6MB

.sxdata Size: 4KB - Virtual size: 252B

.rsrc Size: 160KB - Virtual size: 159KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 248KB - Virtual size: 2.6MB

.sxdata
Size: 4KB - Virtual size: 252B

.rsrc
Size: 160KB - Virtual size: 159KB