ed3c7bd3c8d61d056ec03d4c21eb92486e358d44aa1090c1e2c5b583a5441972

Sharing

Copy URL Twitter E-mail

General

Target

ed3c7bd3c8d61d056ec03d4c21eb92486e358d44aa1090c1e2c5b583a5441972
Size

224KB
MD5

71ceba2059d8ef0cacb8a81b677fb1dc
SHA1

5b1da98339a3a1e89b6343fdb5eb97cb8416cd07
SHA256

ed3c7bd3c8d61d056ec03d4c21eb92486e358d44aa1090c1e2c5b583a5441972
SHA512

3562af36106f574b1acfa74e65b5c8ef0a04bbd9755aafdd71b0417ec56c04534b2ec544daa62d57afc2b9279ce397b3a6048917d637031bb0c208e6aaadfe41
SSDEEP

3072:2dt6Fd/Xdc31yI51F5/rj+dotPjLUqTOa3ZPa92cKCVdaY0G2k5NyIms1:iwPo1yOZ2Vd10GqImW

Score

N/A

Malware Config

Signatures

Files

ed3c7bd3c8d61d056ec03d4c21eb92486e358d44aa1090c1e2c5b583a5441972
.exe windows x86

60ae292b7499b8caf8634c1214e4ed78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
RtlUnwind
GetStartupInfoA
TerminateProcess
HeapFree
HeapAlloc
GetTimeZoneInformation
RaiseException
HeapReAlloc
HeapSize
Sleep
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FlushFileBuffers
ExitProcess
SetHandleCount
GetCommandLineA
ReadFile
GetModuleHandleA
WritePrivateProfileStringW
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetDriveTypeA
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrlenA
lstrlenW
InterlockedDecrement
InterlockedIncrement
FindNextFileW
lstrcpyW
FindFirstFileW
GetLastError
SetLastError
FindClose
GetCommandLineW
SetFilePointer
WriteFile
GetCurrentProcess
FreeLibrary
GetProcessVersion
LoadLibraryA
GetVersion
GlobalAddAtomW
GlobalFindAtomW
GetStdHandle
GetCurrentDirectoryW
GetProcAddress
ExpandEnvironmentStringsW
GetModuleHandleW
GetFileType
GetWindowsDirectoryW
GlobalFlags
lstrcmpiW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
CloseHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynW
lstrcatW
SetErrorMode
GetModuleFileNameW
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
LocalFree
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
GetVersionExA
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExW
InterlockedExchange

user32

GetCapture
GetTopWindow
WinHelpW
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconW
ShowWindow
LoadCursorW
GetSysColorBrush
DestroyMenu
GetMenuItemID
GetDlgItem
DefWindowProcW
DestroyWindow
CreateWindowExW
SetPropW
GetPropW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongW
GetSubMenu
RegisterWindowMessageW
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetSystemMetrics
GrayStringW
DrawTextW
TabbedTextOutW
ReleaseDC
GetDC
GetMenuItemCount
UnhookWindowsHookEx
GetWindowTextW
SetWindowTextW
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameW
LoadBitmapW
GetMenuState
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
SetCursor
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageW
GetCursorPos
SetWindowsHookExW
GetMenu
wsprintfW
LoadStringW
RemovePropW
GetMessageTime
SetWindowPos
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
SendMessageW
MessageBoxW
EnableWindow
PostMessageW
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuW
GetMenuCheckMarkDimensions

gdi32

DeleteObject
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
RectVisible
TextOutW
PtVisible
Escape
ExtTextOutW
GetObjectW
DeleteDC
CreateBitmap

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegisterEventSourceW
DeregisterEventSource
ReportEventW
RegCreateKeyExW

comctl32

ord17

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

60ae292b7499b8caf8634c1214e4ed78

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 80KB - Virtual size: 80KB