a8d65c206b1de600ab7522dfe7161fc3067f381f8b9ae83d72b7033ef9e079a7

Sharing

Copy URL Twitter E-mail

General

Target

a8d65c206b1de600ab7522dfe7161fc3067f381f8b9ae83d72b7033ef9e079a7
Size

372KB
MD5

6a689d173763059a02ab2253292fb152
SHA1

5f3927231b3c2f9c189733fa8a8c9a36ba4d5762
SHA256

a8d65c206b1de600ab7522dfe7161fc3067f381f8b9ae83d72b7033ef9e079a7
SHA512

07d42f3eecd758ed10d1265531717627ff14755de1cdaae6e6f00b1fe1c874cfa459b5135499a9ce721abf4415942f5030bdd35848b19ff19ef739593605c561
SSDEEP

6144:/okr7kAtPTBqAD61BMmGS3Gh82SFWZEuh82SFWZE:/okr7fPBMMmjG/SFZu/SFZ

Score

N/A

Malware Config

Signatures

Files

a8d65c206b1de600ab7522dfe7161fc3067f381f8b9ae83d72b7033ef9e079a7
.exe windows x86

5e6faab1a05456875ad279cab446fb75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationA
UnhandledExceptionFilter
GetFileAttributesA
GetStringTypeA
FlushFileBuffers
SystemTimeToFileTime
DuplicateHandle
GetEnvironmentStringsA
TerminateProcess
IsDebuggerPresent
MultiByteToWideChar
FlushInstructionCache
VirtualFree
RaiseException
InitializeSListHead
FileTimeToSystemTime
lstrcatA
GlobalGetAtomNameA
TlsFree
GetEnvironmentVariableA
TlsGetValue
LocalAlloc
GetFullPathNameA
GetCommandLineA
MulDiv
SetErrorMode
FindClose
SetFilePointer
GetModuleHandleA
ClearCommError
EnterCriticalSection
GetACP
LCMapStringW
HeapFree
GetFileSize
LeaveCriticalSection
GetFileType
GetTimeZoneInformation
WideCharToMultiByte
UnlockFile
GlobalUnlock
SystemTimeToTzSpecificLocalTime
InitializeCriticalSection
lstrcmpiA
LoadLibraryA
SetLastError
LockFile
DeleteCriticalSection
WriteFile
IsBadWritePtr
SetFileAttributesA
LocalUnlock
GlobalReAlloc
GetModuleFileNameA
GetCurrentDirectoryA
HeapCreate
GetLastError
GetWindowsDirectoryA
GetFileTime
SetConsoleScreenBufferSize
SetSystemTime
GetThreadLocale
WritePrivateProfileStringA
GetCPInfo
LockResource
LocalReAlloc
FreeEnvironmentStringsW
Beep
InterlockedDecrement
GetProcessVersion
FatalExit
GlobalAddAtomA
LocalFree
FindResourceA
SetEnvironmentVariableA
Toolhelp32ReadProcessMemory
InterlockedIncrement
SetConsoleCursorPosition
HeapDestroy
FreeLibrary
GlobalDeleteAtom
lstrcpyA
GetProcAddress
LoadResource
ReadFile
IsValidLocale
GetCurrentThread
lstrcmpA
HeapAlloc
SetTimeZoneInformation
MapUserPhysicalPages
Sleep
SetCurrentDirectoryA
GlobalFindAtomA
GlobalHandle
GlobalAlloc
CloseHandle
ReleaseActCtx
VirtualAlloc
DeleteFileA
SetFileTime
GetOEMCP
FindNextFileA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetStringTypeW
GetSystemDirectoryA
SetEndOfFile
GetVersionExA
HeapReAlloc
GetStdHandle
SetHandleCount
DosDateTimeToFileTime
GetStartupInfoA
GlobalLock
CompareStringW
SetConsoleCursorInfo
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
IsBadReadPtr
CreateFileA
SetConsoleTextAttribute
RtlUnwind
LCMapStringA
TlsSetValue
HeapSize
SetStdHandle
IsBadCodePtr
lstrlenA
TlsAlloc
lstrcpynA
LocalFileTimeToFileTime
GetCurrentProcess
GlobalFree
GetVersion
GetEnvironmentStringsW
CompareStringA
ExitProcess
GlobalFlags
GetCurrentThreadId

advapi32

LsaEnumeratePrivileges
AddUsersToEncryptedFile
LockServiceDatabase
LsaEnumeratePrivilegesOfAccount
LsaICLookupNamesWithCreds
RegOpenKeyExA
ElfOldestRecord
RegSetValueExA
RegCreateKeyExA
MSChapSrvChangePassword
RegCloseKey
SystemFunction016
GetAclInformation
RegDeleteValueA
EnumerateTraceGuids
SystemFunction030
ElfCloseEventLog
AddAccessDeniedAceEx
SetSecurityDescriptorControl

comdlg32

dwOKSubclass
Ssync_ANSI_UNICODE_Struct_For_WOW
GetFileTitleA

winmm

waveInAddBuffer
mmioAdvance
waveOutGetPitch
mid32Message
mixerOpen

winspool.drv

OpenPrinterA
DeletePrinterIC
DocumentPropertiesA
ClosePrinter
PlayGdiScriptOnPrinterIC
DeletePrinter
EndDocPrinter

gdi32

RectVisible
TextOutA
SetViewportExtEx
OffsetViewportOrgEx
SetMapMode
CreateBitmap
SetBkColor
SetViewportOrgEx
RestoreDC
gdiPlaySpoolStream
CreateDIBitmap
GetClipBox
GdiPlayDCScript
DeleteObject
CreateEllipticRgn
DeleteDC
PtInRegion
RoundRect
EnumEnhMetaFile
Escape
SetTextColor
SaveDC
ExtTextOutA
GetStockObject
SelectObject
GetDCPenColor
PtVisible
GetObjectA
GetRelAbs
SetWindowExtEx
ScaleViewportExtEx
GetDeviceCaps
ScaleWindowExtEx
SelectClipRgn

user32

GetActiveWindow
GetSystemMetrics
UpdateWindow
TranslateMessage
IsIconic
DispatchMessageA
SetWindowLongA
GetClassInfoA
LoadCursorA
SendMessageA
wsprintfA
SetWindowPos
IsDialogMessageA
ExitWindowsEx
ShowWindow
PeekMessageA
SetPropA
MapWindowPoints
SetMenuItemBitmaps
GetDC
GetPropA
SystemParametersInfoA
GetWindowLongA
GetMenuItemID
GetCapture
GetMenu
GetKeyState
ModifyMenuA
CallWindowProcA
DrawTextA
IsWindowVisible
PtInRect
CallNextHookEx
EnableWindow
GetMessageTime
SetForegroundWindow
LoadIconA
LoadStringA
SetWindowTextA
GetMenuItemCount
ValidateRect
GetFocus
GetForegroundWindow
GetMessageA
WinHelpA
DestroyWindow
GetWindowTextA
GetMenuCheckMarkDimensions
SendDlgItemMessageA
PostMessageA
GetDlgItem
GetMenuState
GetLastActivePopup
CreateWindowExA
SetActiveWindow
GetSysColorBrush
GetClientRect
PostQuitMessage
LoadBitmapA
GetSubMenu
TabbedTextOutA
ReleaseDC
GetWindow
CopyRect
GetClassLongA
RegisterWindowMessageA
IsWindowEnabled
GetNextDlgTabItem
UnhookWindowsHookEx
DrawIcon
ClientToScreen
GrayStringA
EnableMenuItem
RegisterClassA
CreateDialogIndirectParamA
DdeEnableCallback
MessageBoxA
UnregisterClassA
GetCursorPos
BeginPaint
CheckMenuItem
GetParent
GetWindowPlacement
IsWindow
DefWindowProcA
SetWindowsHookExA
EndPaint
GetTopWindow
GetWindowTextLengthA
RemovePropA
GetDlgCtrlID
SetCursor
GetClassNameA
CharUpperA
GetMessagePos
EndDialog
DestroyMenu
GetWindowRect
GetSysColor

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e6faab1a05456875ad279cab446fb75

Headers

File Characteristics

Imports

kernel32

advapi32

comdlg32

winmm

winspool.drv

gdi32

user32

Sections

.text Size: 186KB - Virtual size: 186KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 36KB - Virtual size: 36KB

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 186KB - Virtual size: 186KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 31KB - Virtual size: 30KB