e3042dce6f2eba15e0cfedb5fad6aff47e3c9a77154be741d9250128bfb77a2b

Sharing

Copy URL Twitter E-mail

General

Target

e3042dce6f2eba15e0cfedb5fad6aff47e3c9a77154be741d9250128bfb77a2b
Size

239KB
MD5

7272d5f6042a56913ee78fc5184f0b87
SHA1

99fd453580ed46cabcacd7c671a108d17beab5c3
SHA256

e3042dce6f2eba15e0cfedb5fad6aff47e3c9a77154be741d9250128bfb77a2b
SHA512

78b7425e9cefdc42411aeb8f40f9736b70cb0d392a3ea7f0261f7307f2726e3f2f349e6eeae9f4635c5f8d945a52875b5463bc774c832fe64e7d701ff1d95aa9
SSDEEP

3072:QQ0giQg37kdiHai0h0acLuRHWBqsDUzFNUGSGkbqrdn0yCpbijsekELVFXl68NmQ:QWgKwath0kgFD0Fq+lrd1MUA8fG

Score

N/A

Malware Config

Signatures

Files

e3042dce6f2eba15e0cfedb5fad6aff47e3c9a77154be741d9250128bfb77a2b
.exe windows x86

581f343f368565e2f080283f59ff3a94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
AdjustWindowRectEx
CallNextHookEx
CallWindowProcA
CharUpperA
CheckMenuItem
ClientToScreen
CopyRect
CreateDialogIndirectParamA
CreateWindowExA
DdeEnableCallback
DefWindowProcA
DestroyMenu
DestroyWindow
DispatchMessageA
DrawIcon
DrawTextA
EnableMenuItem
EnableWindow
EndDialog
EndPaint
ExitWindowsEx
GetActiveWindow
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDlgCtrlID
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetLastActivePopup
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessageA
GetMessagePos
GetMessageTime
GetNextDlgTabItem
GetParent
GetPropA
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
wsprintfA
WinHelpA
ValidateRect
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TabbedTextOutA
SystemParametersInfoA
ShowWindow
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetPropA
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetActiveWindow
SendMessageA
SendDlgItemMessageA
RemovePropA
ReleaseDC
RegisterWindowMessageA
RegisterClassA
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
ModifyMenuA
MessageBoxA
MapWindowPoints
LoadStringA
LoadIconA
LoadCursorA
LoadBitmapA
IsWindowVisible
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
GrayStringA
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindow
GetTopWindow

advapi32

AddAccessDeniedAceEx
ElfCloseEventLog
ElfOldestRecord
GetAclInformation
LockServiceDatabase
LsaEnumeratePrivileges
LsaICLookupNamesWithCreds
MSChapSrvChangePassword
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
SystemFunction016
SystemFunction030
AddUsersToEncryptedFile

gdi32

PtInRegion
OffsetViewportOrgEx
GetStockObject
GetRelAbs
GetObjectA
GetDeviceCaps
GetDCPenColor
GetClipBox
PtVisible
ExtTextOutA
Escape
EnumEnhMetaFile
DeleteObject
DeleteDC
CreateEllipticRgn
CreateDIBitmap
CreateBitmap
RectVisible
RestoreDC
RoundRect
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectObject
SetBkColor
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutA
GdiPlayDCScript
gdiPlaySpoolStream

kernel32

FlushInstructionCache
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WritePrivateProfileStringA
WriteFile
WideCharToMultiByte
VirtualFree
VirtualAlloc
UnlockFile
UnhandledExceptionFilter
Toolhelp32ReadProcessMemory
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
Sleep
SetUnhandledExceptionFilter
SetTimeZoneInformation
SetSystemTime
SetStdHandle
SetLastError
SetHandleCount
SetFileTime
SetFilePointer
SetFileAttributesA
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
SetCurrentDirectoryA
SetConsoleTextAttribute
SetConsoleScreenBufferSize
SetConsoleCursorPosition
SetConsoleCursorInfo
RtlUnwind
ReleaseActCtx
ReadProcessMemory
ReadFile
RaiseException
MultiByteToWideChar
MulDiv
MapUserPhysicalPages
LockResource
LockFile
LocalUnlock
LocalReAlloc
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsDebuggerPresent
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InitializeSListHead
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetVersion
GetTimeZoneInformation
GetThreadLocale
GetSystemDirectoryA
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessVersion
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
Beep
ClearCommError
CloseHandle
CompareStringA
CompareStringW
CreateFileA
DeleteCriticalSection
DeleteFileA
DosDateTimeToFileTime
DuplicateHandle
EnterCriticalSection
ExitProcess
FatalExit
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLastError

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

Sections

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

581f343f368565e2f080283f59ff3a94

Headers

File Characteristics

Imports

user32

advapi32

gdi32

kernel32

comdlg32

winspool.drv

Sections

.text Size: 165KB - Virtual size: 164KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 31KB - Virtual size: 31KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 165KB - Virtual size: 164KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 28KB - Virtual size: 28KB