8e21109c8b34d7d922a0a54d63af42aee2dbeb409f3482f4d3df6abf7ca368c3

Sharing

Copy URL Twitter E-mail

General

Target

8e21109c8b34d7d922a0a54d63af42aee2dbeb409f3482f4d3df6abf7ca368c3
Size

300KB
MD5

b00a78d18c946a3664ac68887e06fe04
SHA1

2973a4601bc3eecd7faefb82eeffb0bf7a54b379
SHA256

8e21109c8b34d7d922a0a54d63af42aee2dbeb409f3482f4d3df6abf7ca368c3
SHA512

1d9c2873cb99418ce3805fed1094ffd4950e259f0b93a0650bfd81e017ce77de025f876f1c0548f8374b9d079b89e798ac448729babcfac1688f711952737b51
SSDEEP

3072:4q9BHch1240tYuWSXQ9DwZtrn/QvnBmsBE8nvwSYMV/Pv8Fb6rsRok/uQohqNNGz:4qMgbYyQ9DG9QfBDBE8e20FA+GIa7v6

Score

N/A

Malware Config

Signatures

Files

8e21109c8b34d7d922a0a54d63af42aee2dbeb409f3482f4d3df6abf7ca368c3
.exe windows x86

6aab4d9f731e84a6c19d7995b177bb94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
GetStartupInfoA
GetTickCount
RtlUnwind
ExitProcess
HeapFree
GetCommandLineA
ExitThread
GetSystemTime
GetLocalTime
GetACP
HeapSize
CreateThread
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
TerminateProcess
GetEnvironmentStrings
GetEnvironmentStringsW
GetTimeZoneInformation
GetFileType
HeapReAlloc
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
SetErrorMode
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileTime
GetFileSize
GetFileAttributesA
SizeofResource
GetOEMCP
GetCPInfo
LocalReAlloc
GetProcessVersion
TlsGetValue
TlsFree
TlsSetValue
GlobalReAlloc
LocalAlloc
GlobalHandle
TlsAlloc
FileTimeToLocalFileTime
DeleteCriticalSection
GlobalFlags
GetThreadLocale
FileTimeToSystemTime
lstrcpynA
GetFullPathNameA
SetHandleCount
GetStdHandle
FindClose
WaitCommEvent
GetLastError
ClearCommError
GetCommMask
ResetEvent
CreateEventA
InitializeCriticalSection
EnterCriticalSection
CloseHandle
CreateFileA
SetCommTimeouts
SetCommMask
GetCommState
BuildCommDCBA
SetCommState
PurgeComm
LeaveCriticalSection
SetEvent
CreateDirectoryA
SetCurrentDirectoryA
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
GetVolumeInformationA
FindFirstFileA
IsBadReadPtr
SetEndOfFile
GetProfileStringA
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
GlobalAlloc
GetCurrentThread
GetModuleFileNameA
MulDiv
SetLastError
WritePrivateProfileStringA
GetPrivateProfileIntA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcmpA
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetCurrentThreadId
SetThreadPriority
WaitForSingleObject
ReadFile
WriteFile
GetOverlappedResult
FormatMessageA
LocalFree
SuspendThread
ResumeThread
WaitForMultipleObjects
IsBadCodePtr
FreeLibrary
HeapDestroy

user32

GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
GetSysColorBrush
GetDesktopWindow
GetClassNameA
CharUpperA
DestroyMenu
LoadStringA
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
WindowFromPoint
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
CopyAcceleratorTableA
SetRect
GetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetNextDlgTabItem
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
IsWindowEnabled
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
BringWindowToTop
GetSystemMetrics
DrawIcon
CharNextA
CreateWindowExA
GetSystemMenu
AppendMenuA
LoadIconA
ScreenToClient
LoadImageA
CopyIcon
GetDC
ReleaseDC
InflateRect
InvalidateRect
SetWindowLongA
PtInRect
ReleaseCapture
RedrawWindow
SetCapture
MessageBeep
SetCursor
GetParent
LoadCursorA
GetSysColor
LoadBitmapA
IsWindowVisible
IsZoomed
EnableWindow
GetWindowRect
KillTimer
SetTimer
SetClassLongA
GetDlgItem
GetClassLongA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
EqualRect
SetWindowPos
GetWindow
GetWindowPlacement
CopyRect
GetClientRect
IsWindow
IsIconic
SendMessageA
DestroyIcon
SetWindowPlacement
UpdateWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
GetTextExtentPointA
IntersectClipRect
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
SelectObject
SetBkMode
SaveDC
RestoreDC
CreateBitmap
SetBkColor
DeleteDC
GetClipBox
SetTextColor
PatBlt
CreateCompatibleDC
GetTextExtentPoint32A
CreateFontIndirectA
BitBlt
GetStockObject
GetObjectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ImageList_Destroy
ImageList_GetIcon
ImageList_AddMasked
ImageList_Draw
ImageList_Create
ImageList_LoadImageA
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoTaskMemFree
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fuzgydq
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6aab4d9f731e84a6c19d7995b177bb94

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 176KB - Virtual size: 176KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 60KB - Virtual size: 60KB

fuzgydq Size: - Virtual size: 4KB

.text
Size: 176KB - Virtual size: 176KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 60KB - Virtual size: 60KB

fuzgydq
Size: - Virtual size: 4KB