361e8034fa8c3e7f15836e358e9391ad75519fd23e97319f8efc26c6f00f6bbe

Sharing

Copy URL Twitter E-mail

General

Target

361e8034fa8c3e7f15836e358e9391ad75519fd23e97319f8efc26c6f00f6bbe
Size

416KB
MD5

66520701f16d583310cacf300cf0d3ed
SHA1

c2b59b2088d00b0036403e5b3e024127dbe77793
SHA256

361e8034fa8c3e7f15836e358e9391ad75519fd23e97319f8efc26c6f00f6bbe
SHA512

092211181006fd56d20006bcc5faf109f3aedb45b660fad089d1f0ad293c7f81797eb9881a7fef2817b159799943a9e4a5339a2c84eccaf956261eaa25355429
SSDEEP

6144:TOJ6LGiSbWLzk8M9ED0QpZpOm5lIZZxgV7gu6eH27VCs2GKOpq4EyHPrb:yiTk8MEAY+m7IZDtu1s2GKOs4EC

Score

N/A

Malware Config

Signatures

Files

361e8034fa8c3e7f15836e358e9391ad75519fd23e97319f8efc26c6f00f6bbe
.exe windows x86

54b5d6ac159d8e5baeafb00c65e0f399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

VirtualAlloc
IsBadWritePtr
LCMapStringW
UnhandledExceptionFilter
VirtualFree
LCMapStringA
FreeEnvironmentStringsA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetTimeZoneInformation
HeapCreate
GetDriveTypeA
HeapSize
HeapDestroy
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeA
LocalFree
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalUnlock
SetUnhandledExceptionFilter
GetACP
MulDiv
SetLastError
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
HeapReAlloc
TerminateProcess
ExitProcess
HeapAlloc
RaiseException
HeapFree
GetCommandLineA
GetStartupInfoA
SystemTimeToFileTime
RtlUnwind
GetShortPathNameA
LocalFileTimeToFileTime
GetFileSize
GetVolumeInformationA
GetThreadLocale
GetStringTypeExA
SetEndOfFile
DeleteFileA
MoveFileA
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
DuplicateHandle
CreateFileA
GetCurrentProcess
GetCurrentDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCPInfo
SizeofResource
GetOEMCP
TlsGetValue
GetProcessVersion
GlobalFlags
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
GetDiskFreeSpaceA
InitializeCriticalSection
LocalAlloc
GetFullPathNameA
GetFileTime
SetFileTime
IsBadReadPtr
GetFileAttributesA
GlobalDeleteAtom
GetModuleHandleA
GetTempFileNameA
lstrcpynA
FindClose
FindNextFileA
FindFirstFileA
IsBadCodePtr
GetVersion
GlobalAlloc
lstrcpyA
lstrcmpA
GetCurrentThread
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GetStringTypeW
GetModuleFileNameA
ReleaseSemaphore
GetProfileStringA
FreeLibrary
LoadLibraryA
GetProcAddress
CloseHandle
GetLastError
CreateSemaphoreA
LockResource
LoadResource
FindResourceA
SetErrorMode
FormatMessageA

user32

GetMenuCheckMarkDimensions
GetCursorPos
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageA
CreateDialogIndirectParamA
EndDialog
PostQuitMessage
ShowOwnedPopups
SetCursor
LoadStringA
DestroyMenu
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
SetCapture
WaitMessage
WindowFromPoint
SetRect
IsZoomed
IsRectEmpty
UnionRect
GetClassNameA
GetSysColorBrush
SetMenuItemBitmaps
ModifyMenuA
DestroyIcon
CharUpperA
GetMenuStringA
LockWindowUpdate
SetParent
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetDCEx
SendDlgItemMessageA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
GetNextDlgTabItem
CheckMenuItem
GetClassLongA
SetPropA
UnhookWindowsHookEx
CallWindowProcA
GetMessageTime
GetMessagePos
GetWindow
GetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
CopyRect
PtInRect
ScreenToClient
LoadMenuA
GetWindowThreadProcessId
EnumThreadWindows
GetPropA
RemovePropA
SetRectEmpty
SetWindowLongA
FillRect
GetForegroundWindow
DrawIconEx
SystemParametersInfoA
GetSystemMenu
GetMenuState
GetSystemMetrics
GetSysColor
DrawStateA
DrawFocusRect
SetMenuDefaultItem
GetMenuItemID
DeleteMenu
GetParent
GetMenu
GetSubMenu
InsertMenuA
SendMessageA
IsWindow
PostMessageA
GetWindowRect
OffsetRect
InflateRect
DefWindowProcA
LoadIconA
LoadCursorA
FindWindowA
GetLastActivePopup
IsIconic
SetForegroundWindow
MessageBoxA
GetDC
ReleaseDC
KillTimer
InvalidateRect
UpdateWindow
SetTimer
LoadImageA
IsDialogMessageA
SetDlgItemTextA
GetDlgItemTextA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetClientRect
LoadBitmapA
EnableMenuItem
IsWindowEnabled
ShowWindow
SetWindowsHookExA
SetWindowTextA
CallNextHookEx
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
EnableWindow
IsChild
GetDlgItem
SetWindowPlacement
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
CharNextA
IsWindowUnicode

gdi32

BitBlt
CreateCompatibleDC
RealizePalette
CreatePalette
GetDIBColorTable
CreateHalftonePalette
GetObjectA
CreateCompatibleBitmap
ExtTextOutA
SetBkColor
SetTextColor
GetTextMetricsA
GetStockObject
GetDeviceCaps
GetTextExtentPoint32A
CreateFontIndirectA
DeleteObject
RectInRegion
CreateRectRgnIndirect
DeleteDC
GetClipBox
SelectPalette
SetBkMode
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
RectVisible
TextOutA
PtVisible
CreateBitmap
Escape
SetRectRgn
PatBlt
GetCharWidthA
CreateFontA
StretchDIBits
GetTextExtentPointA
CreateDIBitmap
SaveDC
RestoreDC
CombineRgn
StretchBlt

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
SHBrowseForFolderA
SHGetPathFromIDListA
ExtractIconExA
ExtractIconA
ShellExecuteA

comctl32

ImageList_GetIcon
ImageList_AddMasked
ord17
ImageList_Draw
ImageList_ReplaceIcon
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

54b5d6ac159d8e5baeafb00c65e0f399

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 192KB - Virtual size: 191KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 8KB - Virtual size: 24KB

.rsrc Size: 164KB - Virtual size: 164KB

.text
Size: 192KB - Virtual size: 191KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 8KB - Virtual size: 24KB

.rsrc
Size: 164KB - Virtual size: 164KB