efae1a9573a59ee68335bde9a903a7ead37d16e1d8df431c7ec868d941d654a6

Sharing

Copy URL Twitter E-mail

General

Target

efae1a9573a59ee68335bde9a903a7ead37d16e1d8df431c7ec868d941d654a6
Size

680KB
MD5

03faa41e69791f90a21628cfb5e25406
SHA1

cb5826b5ea980cb91a9da8c915384dc49abc0fba
SHA256

efae1a9573a59ee68335bde9a903a7ead37d16e1d8df431c7ec868d941d654a6
SHA512

5608bf6fba610510d7992499a320b0f03a5491d04c359f32868a1518189da504fbf8b4cb8fad0e21eefcd0e9d7026d8e65c9362a6d2454f14b7b0e3e578e07cf
SSDEEP

12288:KOTNDGPizayKmTO228patWc6rog6JoYwyNyOeudn63d4OulrNdZkIP2Tmt7mJFWG:KkNlz7Kmi22wEKogGLwyN7eup63qO0Lw

Score

N/A

Malware Config

Signatures

Files

efae1a9573a59ee68335bde9a903a7ead37d16e1d8df431c7ec868d941d654a6
.exe windows x86

816c5961717130b1675c343a485e88b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
SelectObject
GetDeviceCaps
Ellipse
GdiFlush
CreateDCW
GetObjectW

advapi32

RegDeleteValueW
RegQueryValueW
RegQueryValueExA
RegQueryValueExW
OpenProcessToken
RegOpenKeyExW
RegQueryInfoKeyW
RegOpenKeyW

comctl32

ImageList_Create
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_AddMasked
PropertySheetW
ImageList_ReplaceIcon
CreateStatusWindowW
ImageList_GetIconSize
ImageList_Destroy
CreatePropertySheetPageW
ImageList_GetImageCount
ord17

kernel32

RtlUnwind
FatalAppExitA
TlsGetValue
LCMapStringW
GetModuleHandleA
GetEnvironmentStrings
TlsAlloc
GetTimeFormatA
GetCurrentThreadId
GetStringTypeA
CompareStringW
GetTimeZoneInformation
VirtualFree
LeaveCriticalSection
DeleteCriticalSection
IsBadWritePtr
HeapAlloc
GetStdHandle
SetLastError
IsValidLocale
GetStartupInfoW
GetCurrentProcess
VirtualProtect
ReadFile
GetProcAddress
FreeEnvironmentStringsW
MultiByteToWideChar
GetCurrentThread
SetEnvironmentVariableA
LoadLibraryA
GetCurrentProcessId
HeapFree
GetDateFormatA
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemInfo
SetHandleCount
InitializeCriticalSection
GetCPInfo
EnterCriticalSection
SetStdHandle
HeapSize
TerminateProcess
VirtualQuery
GetOEMCP
IsValidCodePage
GetModuleFileNameA
GetFileType
GetCommandLineA
WriteFile
TlsSetValue
ExitProcess
GetUserDefaultLCID
GetACP
GetVersionExA
GetCommandLineW
VirtualAlloc
FlushFileBuffers
WideCharToMultiByte
GetLocaleInfoA
GetModuleHandleW
InterlockedExchange
CreateMutexW
GetLastError
LCMapStringA
HeapCreate
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetModuleFileNameW
CompareStringA
CloseHandle
UnhandledExceptionFilter
HeapReAlloc
GetStartupInfoA
GetTickCount
TlsFree
GetStringTypeW
SetFilePointer
GetLocaleInfoW
HeapDestroy

user32

GetMenuItemID
MapVirtualKeyW
FillRect
IsMenu
GetWindow
SetFocus
LoadImageW
OffsetRect
EndPaint
GetFocus
MessageBoxA
IsWindowVisible
GetClassNameW
DispatchMessageW
InvalidateRgn
ReleaseDC
ScreenToClient
SetCapture
GetWindowLongW
SendMessageW
GetMenu
PostMessageW
PostThreadMessageW
InvalidateRect
PostQuitMessage
GetMessagePos
CreateWindowExW
AdjustWindowRectEx
IsZoomed
MessageBoxW
InflateRect
SetForegroundWindow
RegisterWindowMessageW
SetCursorPos
SetWindowLongW
InsertMenuW
TranslateAcceleratorW
GetDesktopWindow
GetParent
IsIconic
GetSysColorBrush
MoveWindow
GetForegroundWindow
IsWindowEnabled
ValidateRect
PeekMessageW
UpdateWindow
SetMenuDefaultItem
ShowWindow
RedrawWindow
CallNextHookEx
DefWindowProcW
SetWindowPlacement
GetClassLongW
GetWindowPlacement
IsClipboardFormatAvailable
DeferWindowPos
SetWindowTextW
IsRectEmpty
IsChild
ReleaseCapture
SetWindowPos
RegisterClassExW
GetSysColor
SetParent
GetClientRect
EmptyClipboard
SetWindowsHookExW
GetCursorPos
RegisterClassW
EndDeferWindowPos
GetMonitorInfoW
CloseClipboard
SetDlgItemTextW
GetMenuItemCount
GetCapture
BeginPaint
SystemParametersInfoW
GetSystemMenu
LoadAcceleratorsW
SetMenu
DestroyWindow
MapWindowPoints
DestroyIcon
wsprintfW
BeginDeferWindowPos
DefFrameProcW
SetScrollInfo

shell32

ShellExecuteW
SHGetMalloc
ord155
SHGetPathFromIDListW
Shell_NotifyIconW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteExW

winspool.drv

ClosePrinter
DocumentPropertiesA
ord204

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 452KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

816c5961717130b1675c343a485e88b0

Headers

File Characteristics

Imports

gdi32

advapi32

comctl32

kernel32

user32

shell32

winspool.drv

Sections

.text Size: 92KB - Virtual size: 88KB

.rdata Size: 452KB - Virtual size: 448KB

.data Size: 104KB - Virtual size: 102KB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 92KB - Virtual size: 88KB

.rdata
Size: 452KB - Virtual size: 448KB

.data
Size: 104KB - Virtual size: 102KB

.rsrc
Size: 28KB - Virtual size: 25KB