e97d0235adc08cecf53da6ac36e7267f04b437cffcbf3dfd2d9250ea51b598b1

Sharing

Copy URL

Twitter E-mail

General

Target

e97d0235adc08cecf53da6ac36e7267f04b437cffcbf3dfd2d9250ea51b598b1
Size

1.3MB
MD5

0a02947dfa89ff7e29a4c1ad92434d3a
SHA1

a36f4a1cf00001f023b881035636fed3b45f8fe6
SHA256

e97d0235adc08cecf53da6ac36e7267f04b437cffcbf3dfd2d9250ea51b598b1
SHA512

fcaf46e9a01c0402c49ca0bd106957ca06da5d95f34852f8dbf1ac59f0726d992afe119a95a43e0b8e7eac0b45698744858820d209e897e75f44eb02c39255c9
SSDEEP

24576:zAmqojwHNeZ8NMg64/khwYYoJfpWujtq0xdlf9Pit5JxQSLTGX:zAmqojUNeZeM/4/k6ZoJBWujtdxw5PtA

Score

1^/10

Malware Config

Signatures

Files

e97d0235adc08cecf53da6ac36e7267f04b437cffcbf3dfd2d9250ea51b598b1
.exe windows x86

cdbb27bf9f655c27f96d7dc625ab5909

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidCodePage
GetTimeZoneInformation
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
FindResourceA
GetCurrentThreadId
lstrcmpA
GetProcAddress
lstrcmpiA
lstrcpyA
GetDriveTypeA
GetFileInformationByHandle
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
GetVersion
MulDiv
SetLastError
GetLastError
LoadLibraryA
GetModuleHandleA
FreeResource
DeleteFileA
CreateFileA
CloseHandle
UnmapViewOfFile
GetSystemInfo
FindFirstFileA
FindClose
GetWindowsDirectoryA
FreeLibrary
lstrcatA
lstrlenA
WinExec
Sleep
GetCurrentProcess
OpenProcess
VirtualAllocEx
ReadProcessMemory
VirtualFreeEx
GetModuleFileNameA
GetVersionExA
SetFilePointer
ReadFile
SystemTimeToFileTime
GetCurrentDirectoryA
LocalFileTimeToFileTime
GetFileAttributesA
CreateDirectoryA
WriteFile
SetFileTime
MultiByteToWideChar
lstrlenW
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GlobalReAlloc
GetModuleFileNameW
InterlockedDecrement
GetCurrentProcessId
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
WaitForSingleObject
lstrcpyW
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
GetThreadLocale
FileTimeToSystemTime
GetModuleHandleW
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
MoveFileA
GetStringTypeExA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetShortPathNameA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
SetErrorMode
GetTickCount
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapReAlloc
RaiseException
VirtualProtect
VirtualAlloc
VirtualQuery
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
WideCharToMultiByte

user32

MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
SetScrollInfo
GetDlgCtrlID
GetMenu
SetWindowPos
IntersectRect
IsIconic
GetWindowPlacement
GetMenuState
GetMenuStringA
InsertMenuA
RemoveMenu
GetMenuItemInfoA
PostMessageA
TrackPopupMenu
SetForegroundWindow
SetMenuDefaultItem
CheckMenuItem
CreatePopupMenu
DrawEdge
DeferWindowPos
GetWindowThreadProcessId
FindWindowExA
FindWindowA
RedrawWindow
CopyIcon
IsWindow
GetMessagePos
MessageBeep
TabbedTextOutA
DrawTextExA
GrayStringA
DrawTextA
DrawIconEx
UpdateWindow
DestroyIcon
EqualRect
IsWindowVisible
ShowScrollBar
RemovePropA
GetPropA
FillRect
SystemParametersInfoA
AppendMenuA
LoadMenuA
GetSubMenu
SetActiveWindow
GetMenuItemID
GetMenuItemCount
LoadBitmapA
InvalidateRect
SetRect
SetRectEmpty
ScreenToClient
GetDC
GetFocus
GetScrollInfo
GetSystemMetrics
IsWindowEnabled
CallWindowProcA
GetParent
GetClassNameA
SendMessageA
SetCursor
LoadCursorA
SetWindowLongA
WindowFromDC
GetWindowDC
DefWindowProcA
WindowFromPoint
GetCapture
SetTimer
GetWindow
GetTopWindow
KillTimer
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetWindowLongA
wsprintfA
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
DispatchMessageA
SetMenu
GetKeyState
GetCursorPos
ScrollWindow
MapWindowPoints
PeekMessageA
GetMessageTime
DestroyWindow
GetDlgItem
SetPropA
EnableWindow
LoadIconA
BeginDeferWindowPos
EndDeferWindowPos
IsRectEmpty
GetClientRect
CopyRect
InflateRect
GetWindowRect
OffsetRect
GetSysColor
ReleaseDC
PtInRect
SetCapture
ClientToScreen
UnpackDDElParam
ReleaseCapture
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
GetClassLongA
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetActiveWindow
GetDesktopWindow
EnableMenuItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
TranslateAcceleratorA
BringWindowToTop
InsertMenuItemA
LoadAcceleratorsA
DestroyMenu
ReuseDDElParam
RegisterClipboardFormatA
GetTabbedTextExtentA
PostThreadMessageA
CreateMenu
SetWindowRgn
DrawIcon
CharUpperA
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
LockWindowUpdate
GetDCEx
UnregisterClassA
GetSysColorBrush
DestroyCursor
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
IsZoomed
UnionRect
GetMessageA
TranslateMessage
ValidateRect
SetParent
GetSystemMenu
DeleteMenu
EndPaint
BeginPaint
ModifyMenuA

gdi32

GetWindowOrgEx
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
Ellipse
LPtoDP
CreateEllipticRgn
GetRgnBox
GetTextColor
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StretchDIBits
GetCharWidthA
GetTextMetricsA
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetTextAlign
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetTextColor
GetClipBox
CreateDCA
GetDeviceCaps
Rectangle
GetBkColor
StretchBlt
PatBlt
CreateSolidBrush
GetPixel
PtVisible
RectVisible
TextOutA
Escape
CreateCompatibleBitmap
GetTextExtentPoint32A
CreateFontIndirectA
BitBlt
CreateDIBSection
GetObjectA
DeleteDC
CreateCompatibleDC
GetStockObject
ExtTextOutA
SetBkColor
DeleteObject
LineTo
MoveToEx
CreatePen
SetPixel
SelectObject
CreateFontA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA

advapi32

CryptImportKey
CryptEncrypt
CryptDestroyKey
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA

shell32

ExtractIconA
Shell_NotifyIconA
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA

comctl32

ImageList_Create

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA

oledlg

ord8

ole32

CoCreateInstance
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoUninitialize
CoInitializeEx
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID

oleaut32

OleCreateFontIndirect
SysAllocString
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime

odbc32

ord72
ord4
ord17
ord41
ord10
ord3
ord16
ord2
ord1
ord15
ord9
ord14
ord20
ord8
ord48
ord49
ord11
ord19
ord12
ord46
ord18
ord13
ord59
ord68
ord44
ord45
ord50
ord51
ord5

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA

wldap32

ord60
ord50
ord26
ord143
ord200
ord32
ord35
ord79
ord33
ord27
ord41
ord46
ord211
ord22
ord30
ord301

ws2_32

ntohl
htonl
gethostname
ioctlsocket
listen
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
socket
closesocket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup

crypt32

CertFreeCertificateContext

Sections

.text
Size: 888KB - Virtual size: 887KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdbb27bf9f655c27f96d7dc625ab5909

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

odbc32

wininet

wldap32

ws2_32

crypt32

Sections

.text Size: 888KB - Virtual size: 887KB

.rdata Size: 184KB - Virtual size: 184KB

.data Size: 16KB - Virtual size: 61KB

.rsrc Size: 240KB - Virtual size: 239KB

.text
Size: 888KB - Virtual size: 887KB

.rdata
Size: 184KB - Virtual size: 184KB

.data
Size: 16KB - Virtual size: 61KB

.rsrc
Size: 240KB - Virtual size: 239KB