5ae7af83f42372a3889f1bc40adf3b4abf2f78cff9148013db960685beb5e522

Sharing

Copy URL Twitter E-mail

General

Target

5ae7af83f42372a3889f1bc40adf3b4abf2f78cff9148013db960685beb5e522
Size

372KB
MD5

40c696833ef1226d5f26db8589c92c60
SHA1

f85877a0fefe525d14f2e8c7cb85b1b2c1e2b170
SHA256

5ae7af83f42372a3889f1bc40adf3b4abf2f78cff9148013db960685beb5e522
SHA512

275c654af3675a18a92e5ff0512c535458e97ac51963d4e7c5d9c97f33ae4fcc7d1b9d550139e4de549917c5d1edcb8275bc605dfdcc6029ba17f970dea02c28
SSDEEP

6144:t0iCE4L3Extmkvt7WiO7KlxEiaNXcBJ/nzpzSC3Wbx2i+y6:kUxjt787d+zB3WbQ

Score

N/A

Malware Config

Signatures

Files

5ae7af83f42372a3889f1bc40adf3b4abf2f78cff9148013db960685beb5e522
.exe windows x86

4b3190d59335fddb9078a3e6cbd83402

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
HeapFree
HeapAlloc
ExitProcess
RtlUnwind
GetStartupInfoA
RaiseException
HeapReAlloc
GetTimeZoneInformation
GetCommandLineA
SetErrorMode
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetACP
HeapSize
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeA
GetModuleFileNameA
GetVersionExA
MultiByteToWideChar
CreateDirectoryA
lstrcpyA
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
GlobalAlloc
GlobalFree
GetOEMCP
GetCPInfo
WritePrivateProfileStringA
GetProcessVersion
GetCurrentDirectoryA
GlobalFlags
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
EnterCriticalSection
TlsAlloc
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynA
GetFullPathNameA
SetFilePointer
FlushFileBuffers
WriteFile
SetLastError
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
GetModuleHandleA
GlobalUnlock
GlobalLock
CloseHandle
GetCurrentThread
GlobalDeleteAtom
lstrcmpiA
GetFileType
lstrlenA
GetCurrentThreadId
lstrcmpA
InterlockedDecrement
LocalFree
WideCharToMultiByte
GetLastError
InterlockedIncrement
GetCurrentProcess
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersion
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsW

user32

MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
DestroyMenu
GetWindowPlacement
EndDialog
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
SetCursor
PostMessageA
wsprintfA
GetWindowLongA
PtInRect
GetClassNameA
GetDC
ReleaseDC
GetParent
GetWindowRect
MessageBoxIndirectA
PeekMessageA
DispatchMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
GetSysColorBrush
SystemParametersInfoA
SetWindowPos
LoadCursorA
MessageBoxA
PostQuitMessage
LoadStringA
DrawTextA
GrayStringA
BeginPaint
TabbedTextOutA
EndPaint
ShowWindow
ClientToScreen
SetWindowTextA
RegisterWindowMessageA
UnhookWindowsHookEx
SetPropA
RegisterClassA
UnregisterClassA

gdi32

GetDeviceCaps
CreateBitmap
GetObjectA
SetTextColor
SetBkColor
GetClipBox
SaveDC
RestoreDC
GetStockObject
SelectObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
DeleteDC
DeleteObject

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

ord17

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.T�
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4b3190d59335fddb9078a3e6cbd83402

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

Sections

.text Size: 88KB - Virtual size: 84KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 12KB - Virtual size: 8KB

.T� Size: 232KB - Virtual size: 232KB

.text
Size: 88KB - Virtual size: 84KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 12KB - Virtual size: 8KB

.T�
Size: 232KB - Virtual size: 232KB