c38f079ed9c078c8ad9dda2ae966cfff02506eb0dc0f815964b26d4a43395d9c

Sharing

Copy URL Twitter E-mail

General

Target

c38f079ed9c078c8ad9dda2ae966cfff02506eb0dc0f815964b26d4a43395d9c
Size

534KB
MD5

6a25fc75097901aba74817193cf2f117
SHA1

2278ce86c1efb56a7d5d78bc75309a71e37cead5
SHA256

c38f079ed9c078c8ad9dda2ae966cfff02506eb0dc0f815964b26d4a43395d9c
SHA512

a572e111c08ad8bcc51817c733a9266bcc3611c41b5378b609c1c4f64f246890de5e258249c5d64a051c375040d33114ea1d9f806bc7c8a81cddda6f8b54fd92
SSDEEP

12288:4JmoceLKvZ0+l63vSlXAVoIZJm0jZQ+FZz7BXq+FdNK:4JdcX0+l63KlLIZM0TZHBfQ

Score

N/A

Malware Config

Signatures

Files

c38f079ed9c078c8ad9dda2ae966cfff02506eb0dc0f815964b26d4a43395d9c
.exe windows x86

98bd6109aab0bb92ec051b44a2003171

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_UP_SYSTEM_ONLY

Imports

kernel32

GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetStringTypeW
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetFilePointer
ReadFile
ExitProcess
SetLastError
GetModuleHandleW
TlsFree
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
HeapFree
GetLocaleInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
CreateFileW
SetEndOfFile
lstrcpyW
CloseHandle
WaitForMultipleObjects
DeviceIoControl
LoadLibraryA
GetProcAddress
GetLastError
SetConsoleTitleA
HeapCreate
HeapQueryInformation
HeapSize
HeapReAlloc
GetModuleFileNameA
HeapAlloc
IsProcessorFeaturePresent
CreateEventA
Sleep
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
GetCPInfo
MultiByteToWideChar
LCMapStringW
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
WideCharToMultiByte
GetModuleFileNameW
IsBadReadPtr
HeapValidate
GetProcessHeap
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetPriorityClass
GetConsoleTitleA
GetCurrentProcess
SetPriorityClass
lstrcmpA
CreateFileA
DecodePointer
EncodePointer
InterlockedDecrement
InterlockedIncrement

user32

GetForegroundWindow
GetDC
UpdateWindow
BeginPaint
GetClientRect
CopyImage
LoadStringA
FillRect
SetClipboardData
FindWindowA
DialogBoxParamA
OffsetRect
GetWindowTextA
SetRect
SetWindowLongA
PtInRect
SetWindowTextA
MessageBoxW
OpenClipboard
ShowWindow
GetCursorPos
DefWindowProcA
GetDlgItem
EmptyClipboard
ReleaseDC
CreateWindowExA
GetWindowLongA
PostQuitMessage
InvalidateRect
EndPaint
ClientToScreen
DestroyWindow
SetCursor
CloseClipboard
GetWindowRect
InsertMenuItemA
MessageBoxA

gdi32

MoveToEx
BitBlt
SetViewportOrgEx
LineTo
CreateColorSpaceA
SetTextColor
DeleteDC
GetDeviceCaps
SetPixel
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
CreateFontW
CreateBitmapIndirect
Polyline
CreatePen
RectVisible
GetObjectA
CreateSolidBrush

winspool.drv

EnumJobsA
ClosePrinter
OpenPrinterA
EnumPrintersA
GetPrinterA

comdlg32

FindTextW

ole32

CoCreateGuid
CoInitializeEx
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitialize

oleaut32

SafeArrayGetUBound
SafeArrayGetLBound

netapi32

NetUserEnum

msacm32

acmStreamClose
acmStreamUnprepareHeader

winmm

mmioDescend
mmioAscend
mmioClose
mmioCreateChunk
mmioOpenW
mmioRead
mmioWrite

version

GetFileVersionInfoSizeA
GetFileVersionInfoW

comctl32

ord412
ord413
InitCommonControlsEx
FlatSB_GetScrollInfo
_TrackMouseEvent

dbghelp

SymGetOptions

setupapi

SetupDiGetDeviceInstallParamsA
SetupDiSetClassInstallParamsA
SetupDiSetDeviceInstallParamsA
SetupDiGetClassInstallParamsA

uxtheme

CloseThemeData
OpenThemeData

snmpapi

SnmpUtilMemAlloc

Sections

.text
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98bd6109aab0bb92ec051b44a2003171

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

ole32

oleaut32

netapi32

msacm32

winmm

version

comctl32

dbghelp

setupapi

uxtheme

snmpapi

Sections

.text Size: 199KB - Virtual size: 198KB

.rdata Size: 257KB - Virtual size: 256KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 46KB - Virtual size: 45KB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 199KB - Virtual size: 198KB

.rdata
Size: 257KB - Virtual size: 256KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 46KB - Virtual size: 45KB

.reloc
Size: 18KB - Virtual size: 18KB