c1a8ffe8ed66e7032cf49f240f9124173224fe6aba31f6f579889913e0300035

Sharing

Copy URL Twitter E-mail

General

Target

c1a8ffe8ed66e7032cf49f240f9124173224fe6aba31f6f579889913e0300035
Size

217KB
MD5

62a86665423a6cddef3132f53a1e85dd
SHA1

6d017d21150c60616e420df403dc8d2823bf0317
SHA256

c1a8ffe8ed66e7032cf49f240f9124173224fe6aba31f6f579889913e0300035
SHA512

5af964c9a73d3cc1213e89bc295dea26e8a3a2708d15d59ac44fcac8b023dd49664f702ef3bd7f26e8beb2dacc3cf9b91e6ae7ac7dcbd5b9e632e499ab05d5cb
SSDEEP

3072:n4LWBnJsowtQqvLx+uf/G1Tze2gW4r7JHdLR1lCpWIk+tSJ3eaF3J1piML+LGQ:oemowztbfe1GA4PJ9LgpJV2eQ1iML

Score

N/A

Malware Config

Signatures

Files

c1a8ffe8ed66e7032cf49f240f9124173224fe6aba31f6f579889913e0300035
.exe windows x86

465e6c5dcbbae3e869856af2bbf9cf3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
OpenMutexA
GetACP
FoldStringW
FindFirstFileW
SetEndOfFile
lstrcpynA
OutputDebugStringA
SetLastError
TerminateProcess
DeleteFileW
FormatMessageW
SetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetStringTypeA
GetCurrentProcessId
ReadFile
FreeResource
SetEvent
FindClose
LeaveCriticalSection
GetOEMCP
LoadLibraryA
LocalUnlock
CompareStringW
DisableThreadLibraryCalls
GlobalUnlock
GetModuleHandleA
SetHandleCount
GetCurrentThreadId
TlsAlloc
WideCharToMultiByte
GetCommandLineW
MulDiv
SetErrorMode
GetLocaleInfoW
RemoveDirectoryW
WriteFile
GlobalLock
EnterCriticalSection
GetTimeFormatW
LocalFree
GetFileSize
SetFilePointer
lstrlenW
GetCurrentProcess
LocalLock
GetDateFormatW
GetProcAddress
ExitProcess
DeleteFileA
UnmapViewOfFile
GetStdHandle
GetEnvironmentStringsW
MapViewOfFile
UnhandledExceptionFilter
FreeLibrary
TlsSetValue
LocalSize
LCMapStringW
ExpandEnvironmentStringsW
FindResourceW
GetPrivateProfileStringA
FlushFileBuffers
CreateFileMappingW
GetCPInfo
GetTimeZoneInformation
GetCommandLineA
GetLastError
MultiByteToWideChar
SetUnhandledExceptionFilter
CloseHandle
GetSystemTimeAsFileTime
GetLocalTime
GetFileType
lstrcpyW
LocalReAlloc
lstrcpyA
GetUserDefaultUILanguage
lstrcpynW
TlsFree
QueryPerformanceCounter
GetFileAttributesW
CreateFileW
TlsGetValue
DeleteCriticalSection
GlobalFree
GetUserDefaultLCID
GetSystemInfo
CreateFileA
InterlockedExchange
GetFileInformationByHandle
GetConsoleOutputCP
IsValidCodePage
LocalAlloc
lstrcatW
GetTickCount
lstrcmpiW
VirtualProtect
GetTempPathA

user32

IntersectRect
GetParent
GetDlgItemTextW
GetWindowTextW
SendMessageW
UnhookWinEvent
SetRectEmpty
TranslateAcceleratorW
DialogBoxParamW
GetWindowLongA
GetDC
SetWinEventHook
KillTimer
DefWindowProcW
GetMessageW
DispatchMessageW
SetCursor
UpdateWindow
CharNextW
MapWindowPoints
GetSystemMenu
IsClipboardFormatAvailable
GetKeyboardLayout
SetActiveWindow
DestroyWindow
GetSystemMetrics
GetMenuState
IsDialogMessageW
CharUpperW
ShowWindow
RegisterWindowMessageW
CharLowerW
SetWindowPlacement
RegisterClassExW
CreateDialogParamW
LoadIconW
SendDlgItemMessageW
LoadAcceleratorsW
ScreenToClient
CheckMenuItem
GetFocus
CreateWindowExW
SetTimer
ReleaseDC
SetFocus
OpenClipboard
GetDesktopWindow
SetWindowLongW
GetSubMenu
EnableWindow
WinHelpW
GetDlgCtrlID
SystemParametersInfoA
MoveWindow
GetDlgItem
GetWindowPlacement
LoadStringW
PostQuitMessage
GetForegroundWindow
GetMenu
EnableMenuItem
GetCursorPos
ChildWindowFromPoint
SetDlgItemTextW
DefWindowProcA
SetWindowTextW
SetScrollPos
GetIconInfo
TranslateMessage
CloseClipboard
PostMessageW
DrawTextExW
LoadImageW
SetWindowLongA
LoadCursorW
IsDlgButtonChecked
MessageBoxW
RegisterWindowMessageA
GetCapture
EndDialog
GetMenuItemCount
UnhookWindowsHookEx
wsprintfW
MessageBeep
RegisterClassA
GetWindowLongW
CheckDlgButton
IsIconic
InvalidateRect
GetClientRect
PeekMessageW

advapi32

RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegCreateKeyW
IsTextUnicode
RegOpenKeyExA
RegSetValueExW

comdlg32

ChooseFontW
FindTextW
CommDlgExtendedError
GetOpenFileNameW
GetFileTitleW
PrintDlgExW
ReplaceTextW
GetSaveFileNameW
PageSetupDlgW

gdi32

SetMapMode
SetWindowExtEx
GetTextExtentPoint32W
StartPage
AbortDoc
CreateFontIndirectW
DeleteDC
SetBkMode
GetDeviceCaps
EnumFontsW
GetObjectW
EndPage
SetAbortProc
GetStockObject
StartDocW
EndDoc
CreateDCW
DeleteObject
GetTextFaceW
SelectObject
TextOutW
LPtoDP
SetViewportExtEx
GetTextMetricsW

shell32

DragQueryFileW
ShellAboutW
DragAcceptFiles
DragFinish

msvcrt

_XcptFilter
__setusermatherr
__getmainargs
_amsg_exit
_CxxThrowException
memset
_c_exit
malloc
__p__commode
exit
memcpy
_cexit
_controlfp
__p__fmode
wcsncpy
iswctype
_snwprintf
_initterm
wcsncmp
_acmdln
_wtol
??0exception@@QAE@XZ
localtime
_exit
realloc
_adjust_fdiv
__set_app_type
time

winspool.drv

OpenPrinterW
ClosePrinter
GetPrinterDriverW

comctl32

CreateStatusWindowW

Sections

.text
Size: 1024B - Virtual size: 938B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

465e6c5dcbbae3e869856af2bbf9cf3f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comdlg32

gdi32

shell32

msvcrt

winspool.drv

comctl32

Sections

.text Size: 1024B - Virtual size: 938B

.rdata Size: 176KB - Virtual size: 176KB

.data Size: 33KB - Virtual size: 1.0MB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 1024B - Virtual size: 938B

.rdata
Size: 176KB - Virtual size: 176KB

.data
Size: 33KB - Virtual size: 1.0MB

.rsrc
Size: 5KB - Virtual size: 5KB