5a7bb2221f849c778844d17370e7e46017136acd699923582b3c1d0f2b39f607

Sharing

Copy URL Twitter E-mail

General

Target

5a7bb2221f849c778844d17370e7e46017136acd699923582b3c1d0f2b39f607
Size

484KB
MD5

6ac376cb3d961ee5e50ef15550e76093
SHA1

2e0a0b5695603b2256e06ef4da86268d7ebb941a
SHA256

5a7bb2221f849c778844d17370e7e46017136acd699923582b3c1d0f2b39f607
SHA512

ce5fefdbd9e0994b30426c312827318005bd8bea926446a5f83dfa5e7205758beac09ec7bd0e98435294eb335a7476923a8a63e8fe79a7f5b7dd74f6532985d1
SSDEEP

6144:6EUGocJkYPTgI/bJQS8h046YrDpqdHnncCtJixtCgg7D3DL3tTd66X+y/OZn:6EimrbJQJp6JdHnncC/irKLLdTLuN

Score

N/A

Malware Config

Signatures

Files

5a7bb2221f849c778844d17370e7e46017136acd699923582b3c1d0f2b39f607
.exe windows x86

abfb0c4e75e4f693a94d55d674035e73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA

comdlg32

ChooseColorW
CommDlgExtendedError
GetOpenFileNameA

ole32

CoTaskMemAlloc
CLSIDFromProgID
StgIsStorageFile
CoGetMalloc
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

LoadTypeLi

kernel32

MapViewOfFile
FreeEnvironmentStringsW
GetLocalTime
TlsFree
CreateFileW
FileTimeToSystemTime
GetStartupInfoA
CreateMutexA
GetCurrentProcess
DeleteFileA
GetVersion
SetThreadPriority
MultiByteToWideChar
GetStdHandle
SetStdHandle
ResumeThread
ResetEvent
GlobalFree
InitializeCriticalSection
lstrcmpiA
LCMapStringW
GetCommandLineA
SetLastError
UnmapViewOfFile
FindClose
FlushFileBuffers
InterlockedExchange
GetCurrentDirectoryA
LoadLibraryExA
InterlockedDecrement
MulDiv
WideCharToMultiByte
GetCurrentThread
VirtualProtect
GetTickCount
SetEvent
GetProcAddress
ExitThread
GetModuleFileNameA
SetEnvironmentVariableA
InterlockedIncrement
GlobalDeleteAtom
GetDriveTypeA
HeapAlloc
LoadLibraryA
GetSystemTimeAsFileTime
LocalAlloc
FindResourceA
HeapCreate
GetTempPathA
GetCPInfo
lstrcmpiW
SetUnhandledExceptionFilter
FindFirstFileA
FileTimeToLocalFileTime
LockFile
CreateDirectoryA
FlushInstructionCache
GlobalAddAtomA
LCMapStringA
CompareStringW
GetSystemTime
GetStringTypeW
ExitProcess
TerminateProcess
lstrcpyA
Sleep
GetDiskFreeSpaceExA
GetVersionExA
DeleteCriticalSection
CloseHandle
LockResource
GetLastError
HeapFree
GetFileType
RaiseException
GetProcessHeap
CreateFileA
TerminateThread
GetProfileStringA
GetACP
IsBadWritePtr
CopyFileA
SetEndOfFile
GetEnvironmentStrings
OutputDebugStringA
GetSystemInfo
GetTimeZoneInformation
TlsAlloc
lstrlenA
EnterCriticalSection
LocalFree
IsValidCodePage
SetHandleCount
GetStringTypeA
CompareFileTime
GetEnvironmentVariableA
GetSystemDirectoryA
TlsSetValue
QueryPerformanceCounter
FileTimeToDosDateTime
ReadFile
RtlUnwind
FindResourceExA
VirtualQuery
SizeofResource
IsBadCodePtr
SetFilePointer
CompareStringA
FormatMessageA
GetEnvironmentStringsW
VirtualFree
GetCurrentThreadId
GetModuleHandleA
IsValidLocale
VirtualAlloc
GetCurrentProcessId
TlsGetValue
LeaveCriticalSection
HeapDestroy
UnhandledExceptionFilter
HeapReAlloc
WriteFile
UnlockFile
GlobalLock
GlobalAlloc
GlobalFlags
FreeEnvironmentStringsA
GetThreadLocale
GetOEMCP

winspool.drv

OpenPrinterW
EnumPrintersW
ord204
DocumentPropertiesW
ClosePrinter

user32

MessageBeep
SystemParametersInfoA
SetMenuItemBitmaps
RemovePropA
LoadIconA
LockWindowUpdate
CharUpperA
SetWindowPos
EnableMenuItem
CreateWindowExA
UnpackDDElParam
GetSysColorBrush
GetKeyboardLayout
GetDesktopWindow
DestroyIcon
LoadAcceleratorsA
DrawStateA
WindowFromPoint
GetClipboardData
DestroyWindow
ToAsciiEx
GetWindowTextLengthA
DispatchMessageA
GetCursor
CreateMenu
GetMessagePos
EnumWindows
DrawFocusRect
GetDCEx
GetAsyncKeyState
PostQuitMessage
GetSystemMetrics
EnumChildWindows
DefWindowProcA
IsRectEmpty
GetMenuItemCount
BringWindowToTop
DestroyCursor
GetDC
HideCaret
RegisterWindowMessageA
TabbedTextOutA
InvalidateRect
AttachThreadInput
OffsetRect
DestroyAcceleratorTable
DrawIconEx
ModifyMenuA
AppendMenuA
MessageBoxA
GetForegroundWindow
IsWindowVisible
UpdateWindow
IsIconic
UnhookWindowsHookEx
RegisterClassA
RedrawWindow
MoveWindow
GetSysColor
ValidateRect
CopyImage
ReleaseCapture
GetNextDlgTabItem
CopyIcon
SetCursor
SetFocus
GetTopWindow
ReleaseDC
GetParent
GetMessageA
GetSubMenu
LoadStringA
SetParent
RegisterClassExA
EqualRect
SetForegroundWindow
PtInRect
SetWindowTextA
GetLastActivePopup
CopyRect
GetWindowDC
ShowWindow
LoadBitmapA

comctl32

ImageList_GetImageInfo
ImageList_GetIcon
ImageList_EndDrag
ImageList_Destroy
ImageList_Replace
_TrackMouseEvent
ImageList_Draw
ImageList_BeginDrag
ImageList_DragEnter
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Add
ImageList_Remove
ImageList_SetImageCount
ImageList_DragLeave
InitCommonControlsEx
ImageList_LoadImageA
ImageList_ReplaceIcon
ImageList_GetImageCount
DestroyPropertySheetPage
ord17
ImageList_DragMove
ImageList_Create

winmm

mmioAscend
mixerGetLineControlsA
waveOutPause
waveInGetNumDevs
mixerGetLineInfoA
waveOutGetDevCapsA
PlaySoundA
mixerGetControlDetailsA
waveOutClose
waveOutGetNumDevs

gdi32

InvertRgn
GetColorAdjustment
PlgBlt
DeleteObject
GetCharWidthFloatA
SetMapperFlags
OffsetViewportOrgEx
OffsetWindowOrgEx
SetMiterLimit
GetBrushOrgEx
OffsetRgn
GetBitmapBits
MaskBlt
GetArcDirection
Escape
CloseEnhMetaFile
SetROP2
AnimatePalette
PtVisible
RectInRegion
ExtEscape
CreateDiscardableBitmap
FloodFill
EndPath
GetCurrentPositionEx
CreatePolyPolygonRgn
GetDCOrgEx
CreateEnhMetaFileA
GetKerningPairsA
SetAbortProc
DrawEscape
SetTextColor
RestoreDC
AngleArc
GdiComment
AbortPath
GetMiterLimit
CreateDIBPatternBrushPt
PolyPolygon
FillRgn
SetColorAdjustment
GetNearestPaletteIndex
GetPixel
PatBlt
BeginPath
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
GetCharABCWidthsFloatA
GetTextExtentPoint32A
SaveDC
PolyDraw
PlayEnhMetaFile
SelectClipPath
SetWindowExtEx
WidenPath
ResizePalette
Chord
DeleteDC
SetBitmapBits
GetAspectRatioFilterEx
PathToRegion
CreateCompatibleBitmap
AbortDoc
SetTextJustification
SetRectRgn
TextOutA
CreateBitmapIndirect
EnumObjects
ArcTo
CreatePatternBrush

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

abfb0c4e75e4f693a94d55d674035e73

Headers

File Characteristics

Imports

shell32

comdlg32

ole32

oleaut32

kernel32

winspool.drv

user32

comctl32

winmm

gdi32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 260KB - Virtual size: 256KB

.data Size: 76KB - Virtual size: 103KB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 260KB - Virtual size: 256KB

.data
Size: 76KB - Virtual size: 103KB

.rsrc
Size: 68KB - Virtual size: 66KB