4201bd3a4e8972417cec432d792fd70f0c73056464163728d75aa584b9d38c75

Sharing

Copy URL Twitter E-mail

General

Target

4201bd3a4e8972417cec432d792fd70f0c73056464163728d75aa584b9d38c75
Size

416KB
MD5

0163019ec9fb8a25df53ad8532e2f34b
SHA1

319c9ae68f48a3d1ff5d0f84a0e040333b409240
SHA256

4201bd3a4e8972417cec432d792fd70f0c73056464163728d75aa584b9d38c75
SHA512

37b1b2112231bd45e1a8ef14f0d07e47fe2d98da25702ff2e1e68341d4666f367972c2dd454de8ba4f468be9ad597b6c2e1955dd001ab658b122480488e093ba
SSDEEP

6144:abrapbbWZc4cyQlTgALXqo1jmUZxL6xQGQgg:afc6ZIPZNLXqs76P

Score

N/A

Malware Config

Signatures

Files

4201bd3a4e8972417cec432d792fd70f0c73056464163728d75aa584b9d38c75
.exe windows x86

e02394267a6b9e55777d856c546d7799

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCurrentThread
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
SizeofResource
GetProcessVersion
GetLastError
SetLastError
WritePrivateProfileStringA
GlobalFlags
MulDiv
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GlobalUnlock
CloseHandle
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
SetHandleCount
GetStdHandle
GetCurrentThreadId
CompareFileTime
FileTimeToLocalFileTime
GetFileTime
CreateFileA
GetFileAttributesA
CopyFileA
GetProfileStringA
GetVersion
GetProcAddress
LoadLibraryA
WinExec
InterlockedExchange

user32

SetFocus
AdjustWindowRectEx
GetSysColor
SendDlgItemMessageA
UpdateWindow
DrawFocusRect
MapWindowPoints
FillRect
PtInRect
InvalidateRect
SetWindowTextA
ShowWindow
LoadStringA
GetClientRect
GetClassNameA
GetDC
IsDialogMessageA
GetWindowDC
ClientToScreen
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetSysColorBrush
DestroyMenu
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
ReleaseDC
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
BeginPaint
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
DefWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetWindowPos
WindowFromPoint
EndDialog
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
PostQuitMessage
PostMessageA
EnableWindow
SetCursor
ScreenToClient
SendMessageA
LoadIconA
CopyRect
LoadCursorA
GetTopWindow
GetMenuItemID
GetCapture
GetMessagePos
RegisterWindowMessageA
CallWindowProcA
ExcludeUpdateRgn
InflateRect
IsWindowUnicode
CharNextA
UnregisterClassA
DefDlgProcA
ShowCaret
HideCaret

gdi32

CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
GetTextMetricsA
DeleteDC
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateDIBitmap
GetTextExtentPointA
PatBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA

comctl32

ord17

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e02394267a6b9e55777d856c546d7799

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 112KB - Virtual size: 109KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 52KB - Virtual size: 49KB

.tc Size: 204KB - Virtual size: 204KB

.text
Size: 112KB - Virtual size: 109KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 52KB - Virtual size: 49KB

.tc
Size: 204KB - Virtual size: 204KB