174876b3e81985f6ede4bb16076dcb0b92c7067f560145a070481ed2a7de2511

Sharing

Copy URL

Twitter E-mail

General

Target

174876b3e81985f6ede4bb16076dcb0b92c7067f560145a070481ed2a7de2511
Size

364KB
MD5

a04064572099c06bc10428d46d423f7e
SHA1

ed13b58b821d1eb62df8f4226736f751049af3e8
SHA256

174876b3e81985f6ede4bb16076dcb0b92c7067f560145a070481ed2a7de2511
SHA512

56cb60559c60fa1909f609cfdca82da5dd7947a303c33b9021cf4ecb1e37d149aae8f6c65d57c9fe3205c6bb8c62a22ddbb503d6fcc6f00d7312ffd3d8f868a3
SSDEEP

6144:/pC1q2+uaE6TxZANu59XTRuz4+Iemt+t3gIV7Yb:+qruUXANu59jRHe7dZY

Score

N/A

Malware Config

Signatures

Files

174876b3e81985f6ede4bb16076dcb0b92c7067f560145a070481ed2a7de2511
.exe windows x86

50ea74af29da5eee28be963a9f3b76aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
HeapReAlloc
HeapSize
GetTimeZoneInformation
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapFree
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapAlloc
GetACP
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
Sleep
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GlobalFlags
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GlobalFree
CloseHandle
GetModuleFileNameA
GlobalAlloc
GetCurrentThread
GetLastError
GetDiskFreeSpaceA
GetModuleHandleA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
GlobalLock
GlobalUnlock
SetLastError
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetProcAddress
lstrcmpA
lstrlenA
lstrcmpiA
MulDiv
LocalAlloc
LocalLock
LocalUnlock
LocalFree
VirtualProtectEx
GetStdHandle

user32

ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
BringWindowToTop
DefFrameProcA
TranslateMDISysAccel
TranslateAcceleratorA
DrawMenuBar
DefMDIChildProcA
RedrawWindow
GetActiveWindow
PostQuitMessage
ShowOwnedPopups
SetCursor
ValidateRect
TranslateMessage
GetMessageA
LoadAcceleratorsA
LoadMenuA
DestroyMenu
SetRectEmpty
ReleaseCapture
GetDesktopWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
IsZoomed
PtInRect
CreateDialogIndirectParamA
EndDialog
LoadCursorA
GetSysColorBrush
GetClassNameA
LoadStringA
CharUpperA
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
SetTimer
KillTimer
WindowFromPoint
InflateRect
GetDCEx
LockWindowUpdate
SetCapture
SetParent
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
IsDialogMessageA
SetDlgItemTextA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
IsWindow
SetFocus
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
UpdateWindow
GetDlgCtrlID
GetParent
IsIconic
GetFocus
IsChild
MessageBeep
SetActiveWindow
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
LoadIconA
ModifyMenuA
IsClipboardFormatAvailable
SetRect
GetTabbedTextExtentA
SetWindowTextA
GetWindowTextLengthA
InvalidateRect
AdjustWindowRectEx
RegisterWindowMessageA
GrayStringA
ReleaseDC
GetDC
SendMessageA
GetCursorPos
EnableWindow
UnregisterClassA

gdi32

SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
DeleteObject
CreateRectRgn
RestoreDC
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
StartDocA
SaveDC
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetCharWidthA
DPtoLP
GetObjectA
GetStockObject
GetDeviceCaps
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPoint32A

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
FindTextA
ReplaceTextA
CommDlgExtendedError
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegQueryValueA
GetFileSecurityA
SetFileSecurityA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegCreateKeyExA

shell32

DragAcceptFiles
DragQueryFileA
SHGetFileInfoA
ExtractIconA
DragFinish

comctl32

ord17

Sections

.text
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

50ea74af29da5eee28be963a9f3b76aa

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 176KB - Virtual size: 173KB

.rdata Size: 92KB - Virtual size: 89KB

.data Size: 28KB - Virtual size: 38KB

.reloc Size: 28KB - Virtual size: 27KB

.DATA Size: 36KB - Virtual size: 35KB

.text
Size: 176KB - Virtual size: 173KB

.rdata
Size: 92KB - Virtual size: 89KB

.data
Size: 28KB - Virtual size: 38KB

.reloc
Size: 28KB - Virtual size: 27KB

.DATA
Size: 36KB - Virtual size: 35KB