9253bd81b9c56023c8cdbca4571de7e9da4e795b32ee63bf61a4be1beb65c15a

Sharing

Copy URL

Twitter E-mail

General

Target

9253bd81b9c56023c8cdbca4571de7e9da4e795b32ee63bf61a4be1beb65c15a
Size

222KB
MD5

6030228aea4c19b33e01ba318070cd80
SHA1

d094d34ca425fc8f392e4524ff05f1e47cbe1fdc
SHA256

9253bd81b9c56023c8cdbca4571de7e9da4e795b32ee63bf61a4be1beb65c15a
SHA512

c6b64b0f3114135e83c4d9f671376d932efa1589c77a6a8138859f303795522da0d21ae3c12af9531942722a372bb27490d83d734b1a58bec737d305bd3a15cd
SSDEEP

3072:iH/hWQv+KtHZn8cB27vNk+yDnRZDxst397a87v+2e2gQ1p4D6nNDjTw/u9w8D1TT:iHZHvhCg2rN21cPRb1uDMjd9wy

Score

N/A

Malware Config

Signatures

Files

9253bd81b9c56023c8cdbca4571de7e9da4e795b32ee63bf61a4be1beb65c15a
.exe windows x86

94acc87ef1a01a14f8a772a201b9886a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

tbtype32

ord187

tbtbx32

ord106

kernel32

GetProcessVersion
MulDiv
GlobalFlags
GetCurrentThreadId
GlobalAddAtomA
GlobalGetAtomNameA
RtlUnwind
RaiseException
GetVersionExA
HeapFree
GetModuleHandleA
GetStartupInfoA
lstrcatA
ExitProcess
GetTimeZoneInformation
SetStdHandle
GetFileType
HeapSize
HeapReAlloc
TerminateProcess
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetModuleFileNameA
GetFileSize
GetFileAttributesA
lstrcmpiA
GetVolumeInformationA
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetProcAddress
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
lstrcpyA
GetCurrentProcess
DuplicateHandle
TlsSetValue
TlsGetValue
LocalReAlloc
GetCPInfo
GlobalLock
GetLocaleInfoA
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GlobalHandle
LocalAlloc
GlobalFree
TlsAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcmpA
GetVersion
InitializeCriticalSection
MultiByteToWideChar
lstrcpynA
GetLastError
InterlockedIncrement
WideCharToMultiByte
InterlockedDecrement
lstrlenA
LocalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
SetLastError
CreateDirectoryA
FindFirstFileA
GetFileTime
CloseHandle
CreateFileA
GetLocalTime
GetSystemTimeAsFileTime
GetACP
GetOEMCP
HeapAlloc
GetCommandLineA

user32

GetSysColor
MapWindowPoints
SystemParametersInfoA
UpdateWindow
PostMessageA
LoadIconA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
DispatchMessageA
PeekMessageA
GetActiveWindow
DestroyMenu
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
GetDesktopWindow
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
EndDialog
PostQuitMessage
FindWindowA
InvalidateRect
SetRectEmpty
LoadAcceleratorsA
ClientToScreen
ReleaseCapture
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
IsIconic
BringWindowToTop
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScreenToClient
ScrollWindow
SetActiveWindow
GetFocus
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
LoadMenuA
RegisterWindowMessageA
GetParent
IsWindow
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgCtrlID
GetWindowTextA
SetWindowTextA
GetWindowLongA
GetDlgItem
GetSystemMetrics
CharUpperA
EnableWindow
SetCursor
ShowOwnedPopups
SendMessageA
UnhookWindowsHookEx
LoadStringA
wsprintfA
MessageBoxA
SetScrollInfo
SetFocus
IsWindowEnabled
GetWindowRect

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

comctl32

ord17
ImageList_Destroy

gdi32

SetBkColor
SelectObject
GetStockObject
RestoreDC
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
DeleteObject
RectVisible
TextOutA
PtVisible
Escape
CreateBitmap
ExtTextOutA
DeleteDC
GetDeviceCaps
GetObjectA
SaveDC
SetTextColor

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

shell32

DragQueryFileA
DragFinish

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

94acc87ef1a01a14f8a772a201b9886a

Headers

File Characteristics

Imports

tbtype32

tbtbx32

kernel32

user32

advapi32

comctl32

gdi32

winspool.drv

comdlg32

shell32

Sections

.text Size: 111KB - Virtual size: 110KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 16KB - Virtual size: 29KB

.idata Size: 74KB - Virtual size: 76KB

.text
Size: 111KB - Virtual size: 110KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 16KB - Virtual size: 29KB

.idata
Size: 74KB - Virtual size: 76KB