20dc04a7bfaed2ae9ce0f33414e7bc577e2ef7b96910e481b5acda85a2f10b10

Sharing

Copy URL

Twitter E-mail

General

Target

20dc04a7bfaed2ae9ce0f33414e7bc577e2ef7b96910e481b5acda85a2f10b10
Size

547KB
MD5

a127ea2f74a0991c48cc8ca2cfa2d5b6
SHA1

6921e0f6aae2331ed739c23ed34fdcf677a4a79c
SHA256

20dc04a7bfaed2ae9ce0f33414e7bc577e2ef7b96910e481b5acda85a2f10b10
SHA512

b9b78e9de464d9c927e4da63b85d4c219475045120e170cb4ec6fb3a57e88032df79b1dc0eb99cf93678c512b7dfc955425a351f4bbab01f64ca50bf3883e49d
SSDEEP

12288:gCzsqD+hNP0S2H1b49jHmB8uso9Jk9tw:pVcNP0S2H1YjHmD9Kw

Score

N/A

Malware Config

Signatures

Files

20dc04a7bfaed2ae9ce0f33414e7bc577e2ef7b96910e481b5acda85a2f10b10
.exe windows x86

810ca1aef2389c75bf53dbe31979e9b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
OpenEventA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryW
IsValidCodePage
GetACP
HeapReAlloc
HeapSize
HeapAlloc
VirtualFree
HeapFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
ExitProcess
GetSystemInfo
VirtualAlloc
RaiseException
RtlUnwind
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
FlushFileBuffers
SetFilePointer
WriteFile
CreateFileA
GetCurrentProcess
GetModuleHandleW
InterlockedIncrement
GetCurrentThread
GetLocaleInfoA
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
FormatMessageA
SetEvent
CloseHandle
CompareStringA
MultiByteToWideChar
LoadLibraryA
lstrcmpW
GetCurrentThreadId
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetCurrentProcessId
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
LocalAlloc
LocalFree
LoadResource
LockResource
SizeofResource
FindResourceA
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
lstrlenA
GetModuleHandleA
GetProcAddress
GetAtomNameA
GlobalGetAtomNameA
GetLastError
SetLastError
TlsAlloc
VirtualProtect
GetModuleFileNameA
FindClose
RemoveDirectoryA
Sleep

user32

InflateRect
PtInRect
GetClipboardFormatNameA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
SetCursor
SetRectEmpty
ShowWindow
SetWindowTextA
GetForegroundWindow
SetForegroundWindow
ShowOwnedPopups
IsWindowVisible
UpdateWindow
BringWindowToTop
GetMenuCheckMarkDimensions
GetDesktopWindow
GetActiveWindow
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
LoadMenuA
SetMenuItemBitmaps
ModifyMenuA
InsertMenuItemA
GetSubMenu
GetMenuItemInfoA
GetMenuState
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
IsMenu
CreatePopupMenu
GrayStringA
DrawTextExA
DrawTextA
FillRect
LoadBitmapA
GetSysColorBrush
ValidateRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
LoadIconA
GetClientRect
MapWindowPoints
GetSysColor
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
CopyRect
EndDeferWindowPos
LoadCursorA
UnregisterHotKey
BeginDeferWindowPos
DeferWindowPos
GetTopWindow
GetWindow
GetCapture
WinHelpA
TrackPopupMenu
GetDlgItem
GetWindowTextA
TranslateMessage
RegisterWindowMessageA
CreateMenu
PostQuitMessage
PeekMessageA
UnhookWindowsHookEx
IsWindow
SendMessageA
PostMessageA
TabbedTextOutA
GetWindowThreadProcessId
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
GetWindowLongA
MessageBoxA
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
GetKeyState
DestroyWindow
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
InvalidateRect

gdi32

CreateSolidBrush
CreateBitmap
CreateFontIndirectA
CreatePatternBrush
GetBkColor
PtVisible
RectVisible
BitBlt
GetPixel
TextOutA
GetTextExtentPoint32A
Escape
SelectObject
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
GetObjectType
GetStockObject
GetObjectA
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA

comctl32

_TrackMouseEvent
ord17
ImageList_DragShowNolock

comdlg32

GetSaveFileNameA
ChooseColorA
GetOpenFileNameA

advapi32

RevertToSelf
SetThreadToken
RegCloseKey
RegEnumKeyA
FreeSid
OpenSCManagerA
SetServiceStatus
AllocateAndInitializeSid
QueryServiceStatus
RegOpenKeyExA
LookupPrivilegeValueW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateServiceA
RegQueryValueExA
RegisterServiceCtrlHandlerA
RegSetValueExA
OpenServiceA
OpenProcessToken
StartServiceCtrlDispatcherA
OpenThreadToken
SetEntriesInAclA
GetTokenInformation

ole32

StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize

oleaut32

VariantClear
VariantChangeType
VariantInit

crypt32

CryptImportPublicKeyInfo
CertGetCertificateChain
CertFindCertificateInStore
CertAddCertificateContextToStore
CertFreeCertificateContext
CertFreeCertificateChain
CertAddEncodedCertificateToStore
CertDeleteCertificateFromStore
CertCreateCertificateContext
CertVerifyCertificateChainPolicy
CryptEncodeObject

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

shell32

DragQueryFileA
DragFinish

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 467KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 1003KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

810ca1aef2389c75bf53dbe31979e9b7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

comdlg32

advapi32

ole32

oleaut32

crypt32

winspool.drv

shell32

oleacc

Sections

.text Size: 467KB - Virtual size: 466KB

.data Size: 12KB - Virtual size: 1003KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 65KB - Virtual size: 64KB

.text
Size: 467KB - Virtual size: 466KB

.data
Size: 12KB - Virtual size: 1003KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 65KB - Virtual size: 64KB