45d3a6c0514d42616544fe31e680fa894096bc92fbf312bb5d031cf5bc4e201b

Sharing

Copy URL Twitter E-mail

General

Target

45d3a6c0514d42616544fe31e680fa894096bc92fbf312bb5d031cf5bc4e201b
Size

444KB
MD5

54d3f4a966e8d1741d3b62ab648ec340
SHA1

6a97a4fab5fba123903914880dd01c7b33932754
SHA256

45d3a6c0514d42616544fe31e680fa894096bc92fbf312bb5d031cf5bc4e201b
SHA512

9a0b8e0381284c71a032b416d5ae8c75f850e9c4b3f1fc533947ba761f0bcb0ccaad7fb7d3aec8eb84fd5122f69d6f9137773b771c2b3a1b0dbfcdfe52d7a4d0
SSDEEP

6144:qumfrAHPxeQJb4OhwX9byBtKqO5Dxa3U0FrgriYqpQXxI:q5rAHhJ839e85oU0FErNqmI

Score

N/A

Malware Config

Signatures

Files

45d3a6c0514d42616544fe31e680fa894096bc92fbf312bb5d031cf5bc4e201b
.exe windows x86

091efd8024e24b7efe1c54f123282315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
WinExec
LoadLibraryA
CopyFileA
OpenProcess
GetTickCount
WideCharToMultiByte
SetLastError
CreateEventA
ResetEvent
SetThreadPriority
GetModuleHandleA
MultiByteToWideChar
DeviceIoControl
CreateProcessA
GetTimeZoneInformation
GetUserDefaultLangID
QueryDosDeviceA
DefineDosDeviceA
GetCurrentThreadId
GetSystemDefaultLangID
GetExitCodeThread
DeleteFileA
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetFileSize
SetFilePointer
WriteFile
GetVolumeInformationA
GetSystemDirectoryA
GlobalFree
WaitForSingleObject
CreateThread
ReadFile
Sleep
GetVersionExA
GetComputerNameA
GlobalAlloc
FindResourceA
LoadResource
LockResource
GetModuleFileNameA
CreateMutexA
ReleaseMutex
GetProcAddress
GetLastError
MulDiv
GetWindowsDirectoryA
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcatA
TlsSetValue
LocalReAlloc
TlsGetValue
TerminateThread
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
UnhandledExceptionFilter
GetFileType
GetOEMCP
GetCPInfo
SetHandleCount
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
lstrlenA
LocalFree
lstrcmpA
lstrcpynA
GlobalUnlock
GlobalLock
GetVersion
LocalAlloc
TlsAlloc
GlobalHandle
GlobalReAlloc
GetStdHandle
lstrcmpiA
GlobalFlags
lstrcpyA
ResumeThread
GetProcessVersion
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
CloseHandle
GetCurrentProcess
FlushFileBuffers
HeapSize
TerminateProcess
SetEndOfFile
ExitThread
GetLocalTime
RtlUnwind
GetSystemTime
GetACP
RaiseException
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc

user32

GetDesktopWindow
GetClassInfoA
DrawTextA
SetWindowTextA
ShowWindow
DefWindowProcA
KillTimer
CreateCursor
EndDialog
DestroyCursor
SetWindowLongA
GetWindowLongA
DialogBoxParamA
SendMessageA
LoadAcceleratorsA
LoadIconA
GetDC
SetWindowPos
GetWindowRect
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DispatchMessageA
TranslateMessage
GetMessageA
CreateDialogParamA
LoadStringA
ClientToScreen
TabbedTextOutA
SetFocus
GrayStringA
UnhookWindowsHookEx
IsWindowEnabled
GetLastActivePopup
GetParent
GetClassNameA
PtInRect
GetDlgCtrlID
GetWindow
GetFocus
SetWindowsHookExA
PeekMessageA
CallNextHookEx
GetKeyState
GetWindowPlacement
IsIconic
SystemParametersInfoA
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
SetTimer
RegisterWindowMessageA
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
WinHelpA
GetCapture
GetTopWindow
SetClassLongA
ModifyMenuA
MessageBoxA
CopyRect
GetClientRect
AdjustWindowRectEx
MapWindowPoints
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
AppendMenuA
CreatePopupMenu
ReleaseDC
DestroyMenu
GetWindowTextA
GetDlgItem
PostQuitMessage
DestroyWindow
RegisterClassA
CreateWindowExA
LoadCursorA
wsprintfA
LoadImageA
GetUserObjectInformationA
EnableWindow
SetThreadDesktop
GetCursorPos
SetForegroundWindow
TrackPopupMenu
DestroyIcon
GetThreadDesktop
OpenInputDesktop
CloseDesktop
GetSystemMetrics
GetSysColor
GetSysColorBrush
EnumWindows
IsDialogMessageA
PostMessageA

advapi32

CreateServiceA
DeleteService
QueryServiceStatus
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegCloseKey
RegFlushKey
CreateProcessAsUserA
OpenProcessToken
ChangeServiceConfigA
RegSetValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA

shell32

ExtractIconExA
Shell_NotifyIconA

wsock32

connect
inet_ntoa
WSAGetLastError
WSACleanup
send
recv
select
htonl
setsockopt
gethostbyname
getpeername
listen
accept
WSAStartup
htons
bind
ntohl
sendto
closesocket
socket
ioctlsocket
WSAAsyncGetHostByAddr
WSACancelAsyncRequest
ntohs

comctl32

InitCommonControlsEx
ord17

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

gdi32

SetBkColor
SetTextColor
CreateSolidBrush
DeleteObject
GetDeviceCaps
CreateFontIndirectA
SetDIBitsToDevice
DeleteDC
SaveDC
RestoreDC
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
CreateBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetObjectA
GetStockObject
SetWindowExtEx
GetClipBox
ScaleWindowExtEx

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Sections

.text
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 475KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

091efd8024e24b7efe1c54f123282315

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wsock32

comctl32

version

gdi32

winspool.drv

Sections

.text Size: 192KB - Virtual size: 190KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 64KB - Virtual size: 475KB

.tls Size: 4KB - Virtual size: 264B

.rsrc Size: 96KB - Virtual size: 93KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 192KB - Virtual size: 190KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 64KB - Virtual size: 475KB

.tls
Size: 4KB - Virtual size: 264B

.rsrc
Size: 96KB - Virtual size: 93KB

.rmnet
Size: 60KB - Virtual size: 60KB