7af5f56d7308e6abe2a84f7e1780df1595f856041f409d42bac8a61d8283902d

Sharing

Copy URL Twitter E-mail

General

Target

7af5f56d7308e6abe2a84f7e1780df1595f856041f409d42bac8a61d8283902d
Size

300KB
MD5

a622aeca49c083c6b43dfa20b1d817ed
SHA1

0acc24188c43fe76accdd37c1f9ac7c986997c85
SHA256

7af5f56d7308e6abe2a84f7e1780df1595f856041f409d42bac8a61d8283902d
SHA512

90e8078036ad343d1f15af76172c0d01a7044221659aad494c911f9130d92ccd2bc6534cdc9184598df469beddda56fdf12cb3da1d422bd60cc129c8cd107658
SSDEEP

3072:P/BFa7SRWr3f6C3abWlcVCZS1KizNMjoFO6oC5B:P/BF8t3aSlE/50C5

Score

N/A

Malware Config

Signatures

Files

7af5f56d7308e6abe2a84f7e1780df1595f856041f409d42bac8a61d8283902d
.exe windows x86

97de5569dc1f925929c98d3ba46cc3db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
FreeLibrary
GetProcessVersion
GetCPInfo
TlsGetValue
GlobalFlags
RtlUnwind
HeapFree
SetStdHandle
GetFileType
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapAlloc
HeapReAlloc
HeapSize
GetOEMCP
ExitProcess
LocalReAlloc
TerminateProcess
TlsSetValue
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
CopyFileA
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
SetLastError
lstrcatA
SetErrorMode
GetModuleHandleA
GetFileAttributesA
GetFileSize
GetFileTime
GetStartupInfoA
InterlockedIncrement
WideCharToMultiByte
Sleep
InterlockedDecrement
GetModuleFileNameA
lstrcpynA
GetFullPathNameA
FindClose
GetVolumeInformationA
FindFirstFileA
LoadLibraryA
lstrcpyA
MultiByteToWideChar
GetProcAddress
LockFile
SetEndOfFile
UnlockFile
SetFilePointer
CloseHandle
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
GetLastError
GetCurrentProcess
DuplicateHandle
UnhandledExceptionFilter
lstrlenA
FreeEnvironmentStringsA
SetHandleCount
GetStdHandle
GetCommandLineA
InterlockedExchange

user32

GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
ShowWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetDlgItem
SetWindowPos
RegisterWindowMessageA
DestroyWindow
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
UnhookWindowsHookEx
GetLastActivePopup
MessageBoxA
EnableWindow
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
PtInRect
GetWindowLongA
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetCursor
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SendMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
DefWindowProcA
SetWindowsHookExA
SetWindowLongA
SetForegroundWindow
GetSystemMetrics
CharUpperA
wsprintfA
PostMessageA
PostQuitMessage
GetWindowRect
GetDlgCtrlID
IsWindowEnabled

gdi32

DeleteObject
SaveDC
RestoreDC
GetStockObject
SelectObject
SetBkColor
SetTextColor
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateBitmap
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
DeleteDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

comctl32

ord17

ws2_32

WSAStartup
getprotobyname
htons
inet_addr
recv
send
closesocket
connect
socket

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

97de5569dc1f925929c98d3ba46cc3db

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ws2_32

Sections

.text Size: 88KB - Virtual size: 86KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 86KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 4KB