3231027e6abd37d96acc84f9160e7de23b700171086ed49ed039d63936428b4f

Sharing

Copy URL

Twitter E-mail

General

Target

3231027e6abd37d96acc84f9160e7de23b700171086ed49ed039d63936428b4f
Size

1.1MB
MD5

542ec806add95f3ce064a55117202b7c
SHA1

a9b25f92622fd7099c00039d64863d42f26a030f
SHA256

3231027e6abd37d96acc84f9160e7de23b700171086ed49ed039d63936428b4f
SHA512

4617e035ec66307301bc6f22d197a3334c468f6648993e93875a20b4429f8b446c64f262ed054e90895c1bb41c188da2fe39acf7464cefc319c6bd27354ed7af
SSDEEP

12288:c2PHmTL9BGejnfQ5FEa356GxwXjS4/Fmwtm/cAKjpuC7pueT:lISejnfaFt3qW4/swuq

Score

1^/10

Malware Config

Signatures

Files

3231027e6abd37d96acc84f9160e7de23b700171086ed49ed039d63936428b4f
.exe windows x86

d4641c56966a1a47fe05593fee60eb26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
GetDriveTypeA
MultiByteToWideChar
lstrcpynA
WriteFile
SetFileTime
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrlenA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
LoadResource
LockResource
SizeofResource
FindResourceA
LoadLibraryA
SetLastError
WideCharToMultiByte
OpenProcess
VirtualAllocEx
ReadProcessMemory
GetModuleFileNameA
lstrcpyA
lstrcatA
WritePrivateProfileStringA
VirtualFreeEx
GetModuleHandleA
GetProcAddress
GetCurrentProcess
DeleteFileA
FindFirstFileA
FindClose
CreateFileA
GetLastError
FreeLibrary
GlobalAlloc
lstrcmpA
GlobalLock
InterlockedExchange
CompareStringA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
WaitForSingleObject
GlobalAddAtomA
GetCurrentProcessId
FreeResource
GlobalFree
GlobalUnlock
MulDiv
LocalFree
FormatMessageA
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetModuleFileNameW
InterlockedDecrement
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetModuleHandleW
FileTimeToSystemTime
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetTickCount
RtlUnwind
RaiseException
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitThread
CreateThread
VirtualProtect
VirtualAlloc
VirtualQuery
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
LCMapStringA
LCMapStringW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SleepEx
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
CloseHandle
UnmapViewOfFile
GetSystemInfo
Sleep

user32

GetClassInfoExA
CreateWindowExA
UpdateWindow
SetForegroundWindow
SetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
GetDlgCtrlID
DestroyMenu
WindowFromPoint
SetCapture
ReleaseCapture
GetSysColorBrush
CharUpperA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
GetClassInfoA
RegisterClipboardFormatA
PostThreadMessageA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
FindWindowExA
FindWindowA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSysColor
GetLastActivePopup
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowLongA
GetMenuCheckMarkDimensions
IsWindowEnabled
MessageBoxA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
SendMessageA
GetWindowThreadProcessId
GetSystemMetrics
RegisterClassA
AdjustWindowRectEx
EqualRect
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
ScreenToClient
OffsetRect
SetCursor
LoadCursorA
IsRectEmpty
PtInRect
GetParent
InvalidateRect
FrameRect
SetRect
CopyRect
wsprintfA
LoadIconA
EnableWindow
GetClientRect
GetWindowRect
SetWindowRgn
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
FillRect
LoadBitmapA

gdi32

GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
CreateBitmap
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
SelectClipRgn
GetRgnBox
CreateRoundRectRgn
DeleteObject
CreateCompatibleDC
BitBlt
CreateSolidBrush
GetBitmapDimensionEx
CreateCompatibleBitmap
GetObjectA
FrameRgn
CreateFontA
SelectObject
GetTextMetricsA
GetStockObject
GetTextColor
GetBkColor
DPtoLP
GetMapMode
RestoreDC
SaveDC
CreateFontIndirectA
CreateRectRgnIndirect
GetDeviceCaps
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx

shell32

ShellExecuteA

msimg32

AlphaBlend
TransparentBlt

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathStripPathA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

wldap32

ord301
ord33
ord41
ord46
ord27
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord143
ord211
ord22
ord60

ws2_32

closesocket
getpeername
socket
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
connect
getaddrinfo
sendto
recvfrom
freeaddrinfo
accept
listen
ioctlsocket
gethostname
htonl
ntohl
getsockopt

crypt32

CertFreeCertificateContext

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comdlg32

GetFileTitleA

advapi32

CryptEncrypt
CryptImportKey
CryptDestroyKey
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID

oleaut32

SysFreeString
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy

Sections

.text
Size: 523KB - Virtual size: 523KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4641c56966a1a47fe05593fee60eb26

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msimg32

comctl32

shlwapi

oledlg

wldap32

ws2_32

crypt32

wininet

oleacc

winspool.drv

comdlg32

advapi32

ole32

oleaut32

Sections

.text Size: 523KB - Virtual size: 523KB

.rdata Size: 114KB - Virtual size: 113KB

.data Size: 11KB - Virtual size: 26KB

.rsrc Size: 386KB - Virtual size: 388KB

.reloc Size: 47KB - Virtual size: 46KB

.text
Size: 523KB - Virtual size: 523KB

.rdata
Size: 114KB - Virtual size: 113KB

.data
Size: 11KB - Virtual size: 26KB

.rsrc
Size: 386KB - Virtual size: 388KB

.reloc
Size: 47KB - Virtual size: 46KB