eaf249f781cfb6fdad9ee9251d088a00e180503ab684672377507526b95b6ad2

Sharing

Copy URL Twitter E-mail

General

Target

eaf249f781cfb6fdad9ee9251d088a00e180503ab684672377507526b95b6ad2
Size

288KB
MD5

09ee4c6c5a08ce14556515dd50c3cf18
SHA1

7f1290f76b38bd67287062194d8f3be37a940d05
SHA256

eaf249f781cfb6fdad9ee9251d088a00e180503ab684672377507526b95b6ad2
SHA512

efe7d752f2db5174a5f05029398bfeb58d7c0dc4d56d9a20bf82f07b5237480cfa2ac354969dce69cfb125c7e791060b54cded6aaf24d7ec371debd79355bd57
SSDEEP

6144:9RQDNDx+tyC0w5TihYms7QOi5hJKmtquUmGY:9MNYtyC0w5GDTzJ5tquzb

Score

N/A

Malware Config

Signatures

Files

eaf249f781cfb6fdad9ee9251d088a00e180503ab684672377507526b95b6ad2
.exe windows x86

8c1d321508f7dc27ef94d888bdc17a2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
HeapReAlloc
lstrlenA
GetProcessHeap
HeapAlloc
HeapFree
CreateProcessA
FindFirstFileA
FindClose
GetLastError
GetUserDefaultLCID
CloseHandle
ResetEvent
CreateEventA
SetLastError
GetProcAddress
FreeLibrary
WaitForSingleObject
Sleep
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
LoadLibraryA
SetEndOfFile
MoveFileA
DeleteFileA
lstrcpyA
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetShortPathNameA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
LocalFree
FormatMessageA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetErrorMode
lstrcatA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetVersion
LocalAlloc
TlsAlloc
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThreadId
SuspendThread
lstrcmpA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LockResource
LoadResource
FindResourceA
GetProcessVersion
MulDiv
GlobalFlags
GetCurrentThread
GetCPInfo
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
RtlUnwind
RaiseException
GetDriveTypeA
CreateThread
ExitThread
GetStartupInfoA
GetCommandLineA
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapSize
TerminateProcess
FatalAppExitA
SetUnhandledExceptionFilter
SetCurrentDirectoryA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetModuleFileNameA
UnlockFile
GetSystemInfo

user32

IsWindowEnabled
GetLastActivePopup
SetWindowsHookExA
PeekMessageA
ValidateRect
CallNextHookEx
GetKeyState
GetNextDlgTabItem
GetFocus
EnableMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowPlacement
IsIconic
IntersectRect
OffsetRect
SetWindowLongA
GetWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
SetWindowPlacement
GetMenuItemID
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
GetWindowLongA
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
SetActiveWindow
MapWindowPoints
UpdateWindow
LoadIconA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
PtInRect
GetDesktopWindow
GetWindowDC
TabbedTextOutA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
OemToCharA
CharToOemA
MessageBoxA
EnableWindow
PostMessageA
DestroyMenu
TrackPopupMenu
SetForegroundWindow
GetSubMenu
UnhookWindowsHookEx
CharUpperA
SetScrollRange
CreateWindowExA
SystemParametersInfoA
MoveWindow
FindWindowExA
RegisterWindowMessageA
GetMessageA
DispatchMessageA
TranslateMessage
DestroyWindow
DefWindowProcA
ClientToScreen
KillTimer
GetSystemMetrics
BeginPaint
GetSysColor
GetClientRect
DrawTextA
EndPaint
RegisterClassExA
FindWindowA
LoadStringA
LoadImageA
PostQuitMessage
GetActiveWindow
IsWindowVisible
GetWindowRect
GetParent
ScreenToClient
SetWindowPos
CreateDialogParamA
SendMessageA
ShowWindow
SetClassLongA
IsWindow
SendDlgItemMessageA
SetDlgItemTextA
WaitForInputIdle
EnumThreadWindows
GetClassNameA
SetTimer
CheckMenuItem
LoadMenuA
GetCursorPos
wsprintfA

gdi32

DeleteObject
GetDeviceCaps
DeleteDC
StartDocA
SaveDC
GetObjectA
GetClipBox
CreateBitmap
Escape
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetDCOrgEx
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
ExtTextOutA
SetTextColor
SetBkColor
SelectObject
GetStockObject
SetBkMode
SelectPalette
RestoreDC
CreateRectRgn

shell32

Shell_NotifyIconA
SHGetFileInfoA
DragAcceptFiles
ShellExecuteA

advapi32

RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyA
RegNotifyChangeKeyValue
RegCreateKeyA
RegQueryValueA
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA

winspool.drv

OpenPrinterA
DocumentPropertiesA
GetJobA
ClosePrinter

comctl32

ord17

comdlg32

GetFileTitleA

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yrdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c1d321508f7dc27ef94d888bdc17a2a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

winspool.drv

comctl32

comdlg32

Sections

.text Size: 140KB - Virtual size: 136KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 20KB - Virtual size: 32KB

.rsrc Size: 20KB - Virtual size: 17KB

.yrdata Size: 76KB - Virtual size: 76KB

.text
Size: 140KB - Virtual size: 136KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 20KB - Virtual size: 32KB

.rsrc
Size: 20KB - Virtual size: 17KB

.yrdata
Size: 76KB - Virtual size: 76KB