56d25389ec8b6ebf3c5fcbd94cb7e796cc29e352cf9779d0f8456c80fdd0a04a

Sharing

Copy URL Twitter E-mail

General

Target

56d25389ec8b6ebf3c5fcbd94cb7e796cc29e352cf9779d0f8456c80fdd0a04a
Size

632KB
MD5

444d6b774c4e66595e619352e0cc5256
SHA1

0c44194a14d01f965819f167e22a6097c75f8d80
SHA256

56d25389ec8b6ebf3c5fcbd94cb7e796cc29e352cf9779d0f8456c80fdd0a04a
SHA512

2249c569b968f2230f4a693161f4762a900ea8fa5a5fe9825d73d917305bf7ae2c7844a3288c550e663f66d959e432fa12210f94301722b29a1a989656655ae3
SSDEEP

3072:XqAzh6ZQYZ5LV5xwviRCAenSsFqm+5IfiUlxao0iscEruUjJqKAmiY5RUyWr+G7j:XqSLYZBlwvzAenSLhHcEaUj84bGwaR

Score

N/A

Malware Config

Signatures

Files

56d25389ec8b6ebf3c5fcbd94cb7e796cc29e352cf9779d0f8456c80fdd0a04a
.exe windows x86

6881c83b94c76d9ade733891369329a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
HeapSize
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
GetFileType
SetStdHandle
GetProfileStringA
RaiseException
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
GetProcessVersion
GetLastError
WritePrivateProfileStringA
GlobalFlags
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
MultiByteToWideChar
InterlockedIncrement
FormatMessageA
LocalFree
WideCharToMultiByte
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetTickCount
lstrlenA
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalUnlock
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
CloseHandle
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
SetUnhandledExceptionFilter
GetModuleFileNameA

user32

GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
GetWindow
SetWindowContextHelpId
RegisterClipboardFormatA
CopyRect
EndDialog
SetActiveWindow
CopyAcceleratorTableA
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GetMenuCheckMarkDimensions
GetMenuState
GetNextDlgGroupItem
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
LoadIconA
ShowScrollBar
GetWindowLongA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
GetWindowRect
CharUpperA
DestroyMenu
SetWindowPos
MessageBeep
GetParent
InvalidateRect
UpdateWindow
EnableWindow
LoadBitmapA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadCursorA
DefDlgProcA
IsWindowUnicode
GetSysColor
CharNextA
PostThreadMessageA
InflateRect
LoadStringA
GetSysColorBrush
PtInRect
GetClassNameA
GetDesktopWindow
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ModifyMenuA
SetRect
SendDlgItemMessageA
MapWindowPoints
IsWindow
AdjustWindowRectEx
SetFocus

gdi32

ScaleWindowExtEx
GetClipBox
IntersectClipRect
MoveToEx
LineTo
DeleteObject
SetWindowExtEx
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetObjectA
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetStockObject
CreateFontIndirectA
GetDeviceCaps
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreatePen

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

comctl32

ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ord17

oledlg

ord8

ole32

CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CoTaskMemFree
CoRevokeClassObject
CoGetClassObject
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleFlushClipboard

olepro32

ord253

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
VariantChangeType
SysAllocString
VariantCopy
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6881c83b94c76d9ade733891369329a8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 144KB - Virtual size: 143KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 20KB - Virtual size: 33KB

.rsrc Size: 428KB - Virtual size: 428KB

.text
Size: 144KB - Virtual size: 143KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 20KB - Virtual size: 33KB

.rsrc
Size: 428KB - Virtual size: 428KB