8070d6a262e93b9f4d055b670a35c2bd757f1797587c3dd78765be9937270310

Sharing

Copy URL Twitter E-mail

General

Target

8070d6a262e93b9f4d055b670a35c2bd757f1797587c3dd78765be9937270310
Size

4.0MB
MD5

52a3f300cf39f5b59cf22db4e69422d2
SHA1

c749ea37c66f6785c7b345ec76153b421f348b3f
SHA256

8070d6a262e93b9f4d055b670a35c2bd757f1797587c3dd78765be9937270310
SHA512

715866d6dec4acdb7df39d257aa7bee791c7173669ec195f5db5dbe213f3117618f9a5369d7e39f671beeb6f309b15e84f4158df7a71ccafdf9794f764852e2c
SSDEEP

98304:62y2iuGEQFvD9Cs3cv7LGZXmLzKIUWEXgQFqh:6R2i7TFR3cvGULzZUWEXgQ

Score

1^/10

Malware Config

Signatures

Files

8070d6a262e93b9f4d055b670a35c2bd757f1797587c3dd78765be9937270310
.exe windows x86

e9b1eff22386eefbf4133d2ec3652f59

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
lstrlenA
WideCharToMultiByte
GetLastError
FindClose
FindFirstFileA
CloseHandle
UnmapViewOfFile
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
GetCurrentProcess
GetModuleHandleA
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
OpenProcess
SetFilePointer
ReadFile
SystemTimeToFileTime
lstrcatA
GetFileInformationByHandle
GetDriveTypeA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
MultiByteToWideChar
GetModuleFileNameA
WriteFile
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
LoadResource
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualFree
HeapCreate
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
IsValidCodePage
GetACP
InitializeCriticalSectionAndSpinCount
GetStdHandle
GetConsoleMode
GetConsoleCP
HeapSize
CreateThread
LockResource
SizeofResource
ExitThread
HeapReAlloc
VirtualAlloc
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetVersionExA
lstrcmpW
SetLastError
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
MulDiv
LocalFree
FormatMessageA
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
WaitForSingleObject
GetCurrentProcessId
WritePrivateProfileStringA
GetModuleFileNameW
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetModuleHandleW
FileTimeToSystemTime
FlushFileBuffers
SetEndOfFile
GetFullPathNameA
SetErrorMode
FileTimeToLocalFileTime
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
Sleep
ExitProcess

user32

GetSystemMetrics
GetWindowPlacement
GetMenu
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
CopyRect
AdjustWindowRectEx
GetSysColor
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
MessageBoxA
GetMenuItemCount
GetMenuItemID
GetSubMenu
UpdateWindow
IsWindowVisible
SetForegroundWindow
SetMenu
GetKeyState
MapWindowPoints
PeekMessageA
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
GetDlgItem
DispatchMessageA
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
SetFocus
IsWindow
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
GetWindow
SetWindowsHookExA
GetCapture
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
ShowWindow
IsWindowEnabled
PostQuitMessage
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageA
SetCursor
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetDesktopWindow
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
GetSysColorBrush
DestroyMenu
UnregisterClassA
GetWindowThreadProcessId
ClientToScreen
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadIconA
wsprintfA
IsRectEmpty
PtInRect
UnionRect
IntersectRect
PostMessageA
IsIconic
IsZoomed
SetWindowRgn
GetWindowRect
GetClientRect
ScreenToClient
GetDC
ReleaseDC
GetUpdateRect
InvalidateRect
SetCapture
SystemParametersInfoA
SetWindowLongA
GetWindowLongA
SetWindowPos
ReleaseCapture
DestroyIcon
GetCursorPos
GetParent
UpdateLayeredWindow
LoadCursorA
SetRectEmpty
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
SendMessageA
FindWindowA
FindWindowExA
EnableWindow
OffsetRect
SetRect
CallNextHookEx

gdi32

SetViewportExtEx
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetMapMode
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
CreateFontIndirectA
GetObjectA
CreateCompatibleBitmap
CreateRectRgn
CombineRgn
CreateCompatibleDC
BitBlt
SetPixel
GetDeviceCaps
GetStockObject
GetDIBits
OffsetViewportOrgEx
ScaleViewportExtEx
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
CreateBitmap

shell32

DragAcceptFiles
DragQueryFileA
ShellExecuteA

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemFree
CreateStreamOnHGlobal

oleaut32

VariantClear
SysAllocStringLen
VariantChangeType
VariantInit

msimg32

AlphaBlend

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsDirectoryA

gdiplus

GdipDisposeImage
GdipLoadImageFromStream
GdipDeleteFontFamily
GdipDeleteGraphics
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipDrawRectanglesI
GdipDrawLineI
GdipSetPenColor
GdipSetPenWidth
GdipDeletePen
GdipCreatePen1
GdipFillRectangleI
GdipSetImageAttributesColorMatrix
GdipGetImageWidth
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneBrush
GdipCreateFont
GdipDrawString
GdipSetTextRenderingHint
GdipGetPathWorldBounds
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipCreateStringFormat
GdipAlloc
GdipFree
GdipDrawImageRectRectI
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFontFamilyFromName
GdipDeleteBrush
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipAddPathString
GdipGetFamily
GdipCloneImage
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle

wldap32

ord26
ord50
ord30
ord60
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord143
ord46
ord211
ord22
ord200

ws2_32

htonl
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
bind
htons
getsockopt
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
ntohs
ntohl

crypt32

CertFreeCertificateContext

winmm

timeSetEvent
timeEndPeriod
timeKillEvent
timeBeginPeriod
timeGetDevCaps

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
CryptImportKey
CryptEncrypt
CryptDestroyKey
CryptGetHashParam
CryptDestroyHash
CryptHashData
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash

Sections

.text
Size: 507KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9b1eff22386eefbf4133d2ec3652f59

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

msimg32

comctl32

shlwapi

gdiplus

wldap32

ws2_32

crypt32

winmm

oleacc

winspool.drv

advapi32

Sections

.text Size: 507KB - Virtual size: 506KB

.rdata Size: 104KB - Virtual size: 104KB

.data Size: 11KB - Virtual size: 25KB

.rsrc Size: 3.3MB - Virtual size: 3.3MB

.reloc Size: 53KB - Virtual size: 53KB

.text
Size: 507KB - Virtual size: 506KB

.rdata
Size: 104KB - Virtual size: 104KB

.data
Size: 11KB - Virtual size: 25KB

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

.reloc
Size: 53KB - Virtual size: 53KB