8341f474da5bf6dde8ecfdd662bad56e3bbdd6c1362d795e9e7b9b6e13e1490d

Sharing

Copy URL

Twitter E-mail

General

Target

8341f474da5bf6dde8ecfdd662bad56e3bbdd6c1362d795e9e7b9b6e13e1490d
Size

433KB
MD5

89510b41b6a12ae16bd4d7bc1193c2fe
SHA1

10b16616fe415702945deaec38b3dcd42b178fb2
SHA256

8341f474da5bf6dde8ecfdd662bad56e3bbdd6c1362d795e9e7b9b6e13e1490d
SHA512

e2c89e8d48a8b1ad2d16cd10c620091ae0286cf7b520c52ce201dbc227fc6df22b7424d29d251658baaa6d288cf78ffb037e158eab01514913e3563a0367901b

Score

N/A

Malware Config

Signatures

Files

8341f474da5bf6dde8ecfdd662bad56e3bbdd6c1362d795e9e7b9b6e13e1490d
.exe windows x86

a54f940962b34d9062f6c0c11b6d16fe

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
GetModuleFileNameA
LoadLibraryW
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapDestroy
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetLastError
TlsFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetLastError
CloseHandle
lstrcpyA
GetProcAddress
LocalAlloc
LocalFree
CreateFileA
lstrcmpiA
OpenProcess
lstrlenA
GetConsoleTitleA
GetCurrentProcessId
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
ExitProcess
GetModuleHandleW
HeapCreate
GetLocaleInfoA
HeapFree
RtlUnwind
GetModuleFileNameW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetTickCount
HeapAlloc
SetConsoleTitleA
CreatePipe
CreateProcessA
lstrcatA
GetModuleHandleA
WriteFile
LoadLibraryA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
InterlockedDecrement
InterlockedIncrement

user32

InflateRect
LoadImageA
WindowFromDC
ScreenToClient
GetWindowThreadProcessId
DrawFrameControl
GetSystemMetrics
RedrawWindow
TrackPopupMenu
DefWindowProcA
PostQuitMessage
ClientToScreen
GetWindowTextA
GetParent
SetWindowLongA
GetWindowLongA
LoadCursorA
CreateWindowExA
GetMessageA
DispatchMessageA
CallWindowProcA
MessageBoxA
SetRect
IntersectRect
LoadIconA
RegisterClassA
CreateMenu
AppendMenuA
IsWindowEnabled
SetWindowPos
GetClientRect
SendMessageA
DestroyIcon
GetDC
GetSysColor
GetSystemMenu
BeginPaint
EndPaint
DestroyWindow
wsprintfA
GetSysColorBrush
FrameRect
ExitWindowsEx
LoadMenuA
GetDlgItem
SetMenu
MessageBeep
GetMenu
CheckMenuItem
SetClassLongA
InvalidateRect
SetTimer
EnableMenuItem
KillTimer
LoadStringA

gdi32

SetBkColor
ResetDCW
SetWindowExtEx
CreatePen
DeleteObject
GetStockObject
StartPage
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
GetObjectA
CreateBitmap
BitBlt
SetTextColor
SetWindowOrgEx
SetDCPenColor
Rectangle
EnumFontsA
MoveToEx
LineTo

winspool.drv

ResetPrinterW

comdlg32

GetOpenFileNameA
CommDlgExtendedError

advapi32

DuplicateTokenEx

shell32

SHGetSpecialFolderPathA
ExtractAssociatedIconA

psapi

GetModuleFileNameExA

avifil32

AVIStreamGetFrameClose
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIStreamLength
AVIStreamStart
AVIFileExit
AVIFileInit
AVIFileOpenA
AVIFileRelease
AVIFileInfoA
AVIFileGetStream
AVIStreamRelease

msimg32

GradientFill

winmm

waveOutOpen
waveOutPrepareHeader
waveOutClose
waveOutWrite

iphlpapi

CreateIpForwardEntry
AddIPAddress

shlwapi

StrStrW
StrToIntExA
PathFindFileNameA

comctl32

ord412
ord6
ImageList_GetIcon
ImageList_SetOverlayImage
ImageList_LoadImageA
InitCommonControlsEx
ord413
ord17

dbghelp

ImageRvaToVa

setupapi

SetupDiGetClassDevsA
SetupTermDefaultQueueCallback
SetupInstallFromInfSectionA
SetupDefaultQueueCallbackA
SetupInitDefaultQueueCallback
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupOpenInfFileA
SetupSetDirectoryIdA
SetupCloseInfFile

wtsapi32

WTSQuerySessionInformationA
WTSEnumerateProcessesA
WTSQueryUserToken
WTSFreeMemory

uxtheme

OpenThemeData
CloseThemeData

Sections

.text
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a54f940962b34d9062f6c0c11b6d16fe

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

psapi

avifil32

msimg32

winmm

iphlpapi

shlwapi

comctl32

dbghelp

setupapi

wtsapi32

uxtheme

Sections

.text Size: 209KB - Virtual size: 208KB

.rdata Size: 74KB - Virtual size: 73KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 143KB - Virtual size: 143KB

.text
Size: 209KB - Virtual size: 208KB

.rdata
Size: 74KB - Virtual size: 73KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 143KB - Virtual size: 143KB