ad0f0271d94de6d66f954c5384f5080c545a2126a529d033469367bc1b79522a

Sharing

Copy URL Twitter E-mail

General

Target

ad0f0271d94de6d66f954c5384f5080c545a2126a529d033469367bc1b79522a
Size

264KB
MD5

6fdfa35c91c64b8c354aa3e0dc3af4b0
SHA1

868a986b01ee2b47dcbb8f9f3e2711ab837b7434
SHA256

ad0f0271d94de6d66f954c5384f5080c545a2126a529d033469367bc1b79522a
SHA512

f3098199f25d0e5292c250d7d3a08e24b04a242fbe7c99e405917791a7a4106df5275a851137811813fbc29338700ab20f7d2b9681f2289a33beddf7a6e34305
SSDEEP

3072:fuE5iOzDVjEPR6KEZ86nFAmi7gCoPiDqXl/c2VVhYZ4z1sxtbjIUWnoRzL:2E5VJjEP4ZnFAmi7Pq9wZ4zytbL3

Score

N/A

Malware Config

Signatures

Files

ad0f0271d94de6d66f954c5384f5080c545a2126a529d033469367bc1b79522a
.exe windows x86

50cd8e580679d7f5c5947448b48eab42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutOpen
waveOutPrepareHeader
waveOutClose
waveOutUnprepareHeader
waveInAddBuffer
mixerGetLineInfoA
waveInClose
waveInGetErrorTextA
waveInReset
waveInPrepareHeader
waveInStart
mixerGetLineControlsA
mixerGetControlDetailsA
waveOutWrite
waveInOpen
mixerGetDevCapsA
mixerOpen
mixerSetControlDetails
mixerClose

kernel32

RtlUnwind
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
RaiseException
HeapReAlloc
HeapSize
GetACP
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
GetOEMCP
SetErrorMode
GetProcessVersion
GetCPInfo
SizeofResource
WritePrivateProfileStringA
TlsGetValue
GlobalFlags
GlobalReAlloc
LocalReAlloc
TlsSetValue
TlsAlloc
TlsFree
GlobalHandle
lstrcpynA
LocalFree
LocalAlloc
SetLastError
GetLastError
MulDiv
GlobalGetAtomNameA
GetVersion
lstrcatA
lstrcpyA
GlobalAddAtomA
GlobalFindAtomA
GlobalFree
GetModuleHandleA
GlobalUnlock
LoadResource
LockResource
GetProfileStringA
FindResourceA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalLock
GetModuleFileNameA
lstrcmpA
GlobalAlloc
GlobalDeleteAtom
GetCurrentThreadId
lstrcmpiA
GetCurrentThread
CreateThread
SetEvent
CloseHandle
Sleep
SetThreadPriority
WaitForMultipleObjects
EnterCriticalSection
GetTickCount
OutputDebugStringA
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcAddress
WaitForSingleObject
CreateEventA
SetHandleCount
GetStdHandle
FreeLibrary
LoadLibraryA

user32

ScreenToClient
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
ShowWindow
ClientToScreen
GetTopWindow
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
BeginPaint
GetClassNameA
PtInRect
GetSysColorBrush
InflateRect
DestroyMenu
InvalidateRect
RegisterClassA
GetMenu
GetMenuItemCount
GetWindowDC
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
GetCapture
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
GetDC
ReleaseDC
UnhookWindowsHookEx
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
LoadStringA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
MessageBoxA
wsprintfA
WinHelpA
GetSubMenu
GetClassInfoA
GetMenuItemID
EndDialog
LoadBitmapA
GetMenuCheckMarkDimensions
IntersectRect
CharNextA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
IsWindowUnicode
DefDlgProcA

gdi32

GetTextExtentPointA
CreateCompatibleDC
CreateBitmap
PatBlt
DeleteObject
GetClipBox
SetBkColor
GetObjectA
SetTextColor
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
IntersectClipRect
BitBlt
CreateDIBitmap
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

comctl32

ord17

Exports

Exports

CreateInterface

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50cd8e580679d7f5c5947448b48eab42

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 32KB - Virtual size: 30KB

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 32KB - Virtual size: 30KB