36a9858b57093f42ec15095ca18efed97843edef8092dd0a2dd0aed1590de312

Sharing

Copy URL Twitter E-mail

General

Target

36a9858b57093f42ec15095ca18efed97843edef8092dd0a2dd0aed1590de312
Size

146KB
MD5

65d5957e5e6ac845059b31759163e795
SHA1

03fad039f40be2120d49f914274b48d3e51a8189
SHA256

36a9858b57093f42ec15095ca18efed97843edef8092dd0a2dd0aed1590de312
SHA512

adfa3d5f7d0ab42287e05feca80ec2f03c42794d29dfe22f1de1948a0b6eca3b8b6a428a7c118665ad6a656b4bfd07e3ed9ee9cee9640f127badab60513a5275
SSDEEP

3072:MsKDV9g1XN4YgUN6iQeii27fLdDM8eGBNcD50fwqPBbhCtawZH:MxLg1/gOGd484D50fZZhy

Score

N/A

Malware Config

Signatures

Files

36a9858b57093f42ec15095ca18efed97843edef8092dd0a2dd0aed1590de312
.exe windows x86

d0efdc9be20da3959be2ab06e0edfaba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
DeleteObject
Escape
ExtTextOutW
GetClipBox
GetDeviceCaps
GetStockObject
OffsetViewportOrgEx
RectVisible
CreatePen
ScaleViewportExtEx
ScaleWindowExtEx
SelectObject
SetBkColor
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutW
SaveDC
CreateBitmap

comctl32

ord17

kernel32

CloseHandle
CreateFileW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleWindow
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcAddress
GetProcessVersion
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersion
GetVersionExA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
IsBadHugeReadPtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
LocalReAlloc
MultiByteToWideChar
OpenProcess
Process32FirstW
Process32NextW
RaiseException
RtlUnwind
SetCommBreak
SetErrorMode
SetHandleCount
SetInformationJobObject
SetLastError
SetSystemTimeAdjustment
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
WinExec
WriteFile
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW

shell32

SHGetFolderLocation

user32

AdjustWindowRectEx
CallNextHookEx
CharNextExA
CheckMenuItem
CreateWindowExW
DdeCreateDataHandle
DdeGetData
DestroyCursor
DestroyMenu
DestroyWindow
DispatchMessageW
DrawFocusRect
DrawTextW
EnableMenuItem
EnableWindow
GetCapture
GetClassInfoW
GetClassNameW
GetClientRect
GetDC
GetDesktopWindow
GetDlgItem
GetForegroundWindow
GetKBCodePage
GetKeyState
GetLastActivePopup
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessagePos
GetMessageTime
GetNextDlgTabItem
GetParent
GetPropW
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetWindowLongW
GetWindowPlacement
GetWindowRect
GrayStringW
IsIconic
IsWindowEnabled
LoadBitmapW
LoadCursorW
LoadStringW
MapWindowPoints
MessageBoxW
ModifyMenuW
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterWindowMessageW
ReleaseDC
SendMessageW
SetFocus
SetForegroundWindow
SetMenuInfo
SetMenuItemBitmaps
SetPropW
SetUserObjectSecurity
SetWindowLongW
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowScrollBar
SystemParametersInfoW
TabbedTextOutW
TileWindows
UnhookWindowsHook
UnhookWindowsHookEx
UnregisterClassW
WINNLSGetEnableStatus
WinHelpW
WindowFromPoint

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

Exports

Exports

EndSession
GetObjectInfo
HrCopyStreamToByte
MessageBoxInstW

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0efdc9be20da3959be2ab06e0edfaba

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

comctl32

kernel32

shell32

user32

winspool.drv

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 5KB - Virtual size: 5KB