c685120891e20635adfbefea860a58f44cac77ec125ee249282235de1ca8a868

Sharing

Copy URL Twitter E-mail

General

Target

c685120891e20635adfbefea860a58f44cac77ec125ee249282235de1ca8a868
Size

740KB
MD5

3d292dc57d35d06b58de21ef18ec752a
SHA1

457b1a7b6cc3f82e04c76b85fc63130b25ccaa02
SHA256

c685120891e20635adfbefea860a58f44cac77ec125ee249282235de1ca8a868
SHA512

638836946ead6e1821dba879da70a2b61e34201dadfb667de3d25ab818bdfbff9d0f722872f5638b2f59c81716dfddffa3a2ede32e797da4a3c1130c69eed1a4
SSDEEP

12288:bw0+8PLuzMxFuhZY5i6rRbFumQ9I3Neo3OLuPkJkxJ/zt5Cbt5WhRWyn:bV5trRNQ9oeo3OLsJ6bHWrW

Score

1^/10

Malware Config

Signatures

Files

c685120891e20635adfbefea860a58f44cac77ec125ee249282235de1ca8a868
.exe windows x86

0fc98d30520dedc77829d811625b061c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetStdHandle
GetFileType
GetACP
HeapReAlloc
HeapSize
FatalAppExitA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
ExitProcess
GetCommandLineA
GetStartupInfoA
GetProfileStringA
GetSystemDirectoryA
MoveFileExA
LocalLock
LocalUnlock
GetModuleHandleW
InterlockedExchange
RaiseException
HeapAlloc
HeapFree
RtlUnwind
GetTickCount
CopyFileA
GlobalSize
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GetCurrentDirectoryA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
MulDiv
SetLastError
GlobalReAlloc
FormatMessageA
LocalFree
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcpynA
GetVersionExA
GetModuleFileNameA
SetCurrentDirectoryA
FindResourceA
SizeofResource
LoadResource
GetWindowsDirectoryA
GetTempPathA
CreateDirectoryA
WinExec
GetEnvironmentStringsW
Sleep

user32

GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetDC
ReleaseDC
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetMenuItemCount
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
LoadIconA
GetWindowRect
UpdateWindow
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
SetCursor
ShowOwnedPopups
OemToCharA
CharToOemA
PostQuitMessage
FillRect
CopyRect
OffsetRect
IsChild
SetTimer
KillTimer
IsWindowVisible
ScreenToClient
InflateRect
GetMenu
RegisterClassA
GetClassInfoA
CheckRadioButton
wsprintfA
WinHelpA
PtInRect
SetParent
ShowCaret
GetWindow
GetFocus
GetDlgCtrlID
GetMessagePos
LoadMenuA
GetSubMenu
PostMessageA
IsWindowUnicode
InvalidateRect
GetClientRect
EnableWindow
SendMessageA
DrawIcon
GetSystemMetrics
IsIconic
GetCapture
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
SetWindowContextHelpId
MapDialogRect
CharUpperA
GetDesktopWindow
DestroyIcon
PostThreadMessageA
RegisterClipboardFormatA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RemoveMenu
AppendMenuA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
GetDialogBaseUnits
GetSysColorBrush
LoadStringA
GetMenuStringA
DeleteMenu
InsertMenuA
GetClassNameA
GetWindowThreadProcessId
WaitMessage
ReleaseCapture
CheckDlgButton
LoadCursorA
DestroyMenu
WindowFromPoint
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
wvsprintfA
CharNextA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
GetCursorPos
SetCapture

gdi32

SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
SetPolyFillMode
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
LPtoDP
CopyMetaFileA
CreateDCA
SetBkMode
SelectPalette
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
GetStockObject
GetDeviceCaps
GetBkColor
GetTextColor
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateRectRgnIndirect
PatBlt
CreateBitmap
CreateFontIndirectA
CreateSolidBrush
CreatePen
DeleteObject
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateFontA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegSetValueA
RegDeleteKeyA

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
ExtractIconA
DragAcceptFiles

comctl32

ord13
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write
ord17

oledlg

ord8

ole32

OleUninitialize
OleInitialize
ReleaseStgMedium
OleSetClipboard
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
CoFreeUnusedLibraries
OleRun
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRegisterClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoDisconnectObject
CoRevokeClassObject
CoTreatAsClass

olepro32

ord253

oleaut32

VariantCopy
SysAllocString
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SysAllocStringByteLen
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
SysFreeString
VariantClear
VariantChangeType
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SysReAllocStringLen
SysStringLen
LoadTypeLi
SafeArrayRedim
SafeArrayGetUBound

wsock32

send
sendto
shutdown
recv
WSACleanup
WSAStartup
socket
htons
bind
connect
WSAAsyncSelect
recvfrom
htonl
setsockopt
closesocket
WSAGetLastError

winmm

timeGetTime

shlwapi

PathFileExistsA
PathIsDirectoryA

odbc32

ord72
ord4
ord10
ord5
ord16
ord61
ord13
ord18
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord2
ord1
ord23
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord20
ord49
ord48
ord17

Sections

.text
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fc98d30520dedc77829d811625b061c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

winmm

shlwapi

odbc32

Sections

.text Size: 448KB - Virtual size: 447KB

.rdata Size: 100KB - Virtual size: 96KB

.data Size: 28KB - Virtual size: 46KB

.rsrc Size: 160KB - Virtual size: 156KB

.text
Size: 448KB - Virtual size: 447KB

.rdata
Size: 100KB - Virtual size: 96KB

.data
Size: 28KB - Virtual size: 46KB

.rsrc
Size: 160KB - Virtual size: 156KB