1258bcc3922eeace33c876041a8a947d8e4316eb5041dd72bc1610ce58674de1

Sharing

Copy URL Twitter E-mail

General

Target

1258bcc3922eeace33c876041a8a947d8e4316eb5041dd72bc1610ce58674de1
Size

532KB
MD5

492f3e239e064ce67523a93934ec7240
SHA1

6ed72e763a607e8532dd56b9ed5e43872c5ba110
SHA256

1258bcc3922eeace33c876041a8a947d8e4316eb5041dd72bc1610ce58674de1
SHA512

d1ffeeb1bfd6527165973d2e892c6cf704f12b3753507eb8d6df448455603316d6aa567826f077fe77b4fea237cf18f2c73a837e597c1cd235c4453401d4d297
SSDEEP

6144:9AwQBvf1kd9vWHr7IIJG1vNKIfV8Id5IuPStpFfWS56UCqp:9AwQVfad9vWHr79JGdbKBtl6

Score

N/A

Malware Config

Signatures

Files

1258bcc3922eeace33c876041a8a947d8e4316eb5041dd72bc1610ce58674de1
.exe windows x86

7f156667c1890328f35733e2aecdbeab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
FindFirstFileA
GlobalAlloc
GetModuleHandleA
FindFirstFileW
LoadLibraryW
FindNextFileW
FindClose
HeapAlloc
HeapReAlloc
GetProcessHeap
HeapFree
CreateProcessA
GlobalFree
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiW
lstrlenW
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
GetUserDefaultLCID
Sleep
CloseHandle
ResetEvent
CreateEventA
WaitForSingleObject
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleFileNameA
GetSystemInfo
LoadLibraryA
GetProcAddress
LocalAlloc
LocalFree
RaiseException
lstrcpynA
FormatMessageA
GlobalUnlock
GlobalLock
GlobalSize
MulDiv
CopyFileA
MoveFileA
DeleteFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
lstrcpyA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetShortPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileTime
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
lstrcmpA
lstrcatA
SetErrorMode
GlobalFlags
SetThreadPriority
ResumeThread
GetCurrentThreadId
SetEvent
SuspendThread
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetCPInfo
GetOEMCP
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentDirectoryA
ExitProcess
RtlUnwind
GetDriveTypeA
VirtualProtect
VirtualAlloc
VirtualQuery
ExitThread
CreateThread
GetStartupInfoA
GetCommandLineA
HeapSize
TerminateProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
SetCurrentDirectoryA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetConsoleCtrlHandler
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
FreeLibrary
GetModuleFileNameW
WideCharToMultiByte

user32

SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetMenu
UpdateWindow
ShowScrollBar
GetScrollRange
SetScrollRange
TrackPopupMenuEx
ScrollWindow
MapWindowPoints
LoadIconA
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
IsChild
RemovePropA
GetPropA
SetPropA
GetClassInfoExA
GetClassInfoA
GetCapture
WinHelpA
LoadBitmapA
GetMenuCheckMarkDimensions
EnableMenuItem
ModifyMenuA
SetMenuItemBitmaps
InflateRect
GetMenuItemInfoA
SetCursor
ShowOwnedPopups
DeleteMenu
DestroyIcon
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetDialogBaseUnits
InsertMenuA
GetMenuItemCount
RemoveMenu
DrawTextExA
TabbedTextOutA
FillRect
ScrollWindowEx
RegisterClassA
SetWindowLongA
SetWindowPlacement
CallWindowProcA
OffsetRect
GetClassLongA
IsIconic
GetWindowPlacement
CopyRect
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemInt
GetDlgItemTextA
RegisterWindowMessageA
CreateWindowExA
SystemParametersInfoA
MoveWindow
FindWindowExA
GetMessageA
DispatchMessageA
TranslateMessage
PostQuitMessage
GetActiveWindow
RegisterClassExA
GetWindowRect
GetParent
ScreenToClient
CreateDialogParamA
SetClassLongA
SendDlgItemMessageA
SetDlgItemTextA
DefWindowProcA
ClientToScreen
SetWindowPos
KillTimer
GetSystemMetrics
BeginPaint
GetSysColor
GetClientRect
DrawTextA
EndPaint
IsWindowVisible
DestroyWindow
LoadStringW
FindWindowA
LoadStringA
LoadImageA
IsWindow
SendMessageA
WaitForInputIdle
EnumThreadWindows
GetClassNameA
SetTimer
LoadMenuA
GetCursorPos
GetSubMenu
SetForegroundWindow
TrackPopupMenu
DestroyMenu
PostMessageA
CheckMenuItem
CharUpperW
CharUpperA
CharLowerW
CharLowerA
GetWindowLongA
ShowWindow
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
GetScrollPos
GetForegroundWindow
GetDesktopWindow
GetWindowDC
IntersectRect
SetScrollPos
SetFocus
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
GetWindow
GetDlgCtrlID
PtInRect
GetFocus
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
MessageBoxA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
UnregisterClassA
wsprintfA
GetMenuState
GetMenuStringA
AppendMenuA
GrayStringA
GetMenuItemID

gdi32

IntersectClipRect
OffsetClipRgn
GetDeviceCaps
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
DeleteObject
CreateDCA
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
GetStockObject
SelectObject
SetBkColor
SetTextColor
ExtTextOutA
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
CopyMetaFileA
LineTo
GetTextMetricsA
GetTextExtentPoint32A
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateFontIndirectA
GetDCOrgEx
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectA
SelectClipPath

winspool.drv

OpenPrinterA
GetJobA
ClosePrinter
DocumentPropertiesA

advapi32

RegQueryValueA
RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegNotifyChangeKeyValue
RegCreateKeyA
RegSetValueA
RegSetValueExW
RegEnumValueW
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA

shell32

ShellExecuteA
SHGetFileInfoA
ExtractIconA
Shell_NotifyIconA

comctl32

ord17

shlwapi

PathRemoveExtensionA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

ole32

StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
CoTreatAsClass
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateBindCtx
CoTaskMemAlloc
OleDuplicateData
ReleaseStgMedium
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CLSIDFromString
OleRegGetUserType

oleaut32

SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysFreeString
VariantClear
SafeArrayRedim
VariantChangeType
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysReAllocStringLen
VarDateFromStr
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VariantInit
SafeArrayCreate
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayLock

Sections

.text
Size: 348KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7f156667c1890328f35733e2aecdbeab

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleacc

comdlg32

ole32

oleaut32

Sections

.text Size: 348KB - Virtual size: 346KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 16KB - Virtual size: 29KB

.idata Size: 16KB - Virtual size: 14KB

.didat Size: 4KB - Virtual size: 1KB

.rsrc Size: 24KB - Virtual size: 22KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 348KB - Virtual size: 346KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 16KB - Virtual size: 29KB

.idata
Size: 16KB - Virtual size: 14KB

.didat
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 24KB - Virtual size: 22KB

.rmnet
Size: 60KB - Virtual size: 60KB