22d5c24bc578f1ceaf645d70f83d7a8d51134c7867d223f877b3179ea27ed4aa

Sharing

Copy URL Twitter E-mail

General

Target

22d5c24bc578f1ceaf645d70f83d7a8d51134c7867d223f877b3179ea27ed4aa
Size

308KB
MD5

52a73b8005c1bb8966d02649653ee8b0
SHA1

47fc26f42b877177733056e1398d0d7e1aa2cc3f
SHA256

22d5c24bc578f1ceaf645d70f83d7a8d51134c7867d223f877b3179ea27ed4aa
SHA512

e7f07865ce9c6d64dbabf22a92a8cd08e3fb31155f5644118cb15c0841f1a9ad5ca3bc13281175fafb5b0107515c4da601c022ce7585dc7cc61c62e3e52b05bd
SSDEEP

6144:cxROT0JWCnxA+9uUqouU6CDuQxtTAF76NSlY7fvP:cxRY0JWYxA+Zqo5dtAFQSm7fvP

Score

N/A

Malware Config

Signatures

Files

22d5c24bc578f1ceaf645d70f83d7a8d51134c7867d223f877b3179ea27ed4aa
.exe windows x86

c860edcbf2a0d939553de47b3362e57d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
QueryPerformanceCounter
VirtualProtect
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapSize
InterlockedExchange
TerminateProcess
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
GetStartupInfoW
GetTickCount
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringW
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
CloseHandle
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
LoadLibraryW
GetLocaleInfoW
WideCharToMultiByte
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
lstrcatW
lstrcmpW
GetProcAddress
GetVersionExA
SetLastError
MulDiv
GlobalAlloc
FormatMessageW
LocalFree
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
lstrcpynW
lstrcmpiW
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
GetLastError
GetModuleHandleW
lstrcpyW
lstrlenW
EnterCriticalSection
GetModuleFileNameW
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
GetCurrentProcessId

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharUpperW
wsprintfW
ReleaseCapture
SetCapture
DestroyMenu
LoadCursorW
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
IsChild
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
MessageBoxW
GetKeyState
SetForegroundWindow
DrawIcon
SendMessageW
IsIconic
GetClientRect
LoadIconW
UnregisterClassW
GetSystemMetrics
EnableWindow
CharLowerW
CharNextW
EndDialog
GetNextDlgTabItem
GetParent
IsWindowVisible
UpdateWindow
GetMenu
PostMessageW
GetSysColor
AdjustWindowRectEx
EqualRect
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
GetWindowTextW
GetFocus
SetWindowPos
PostThreadMessageW
GetClassNameW
RegisterClipboardFormatW
IsWindowEnabled
GetDlgItem
GetWindowLongW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
GetDesktopWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
UnhookWindowsHookEx
SendDlgItemMessageW
IsDialogMessageW
SetWindowTextW
GetDlgCtrlID
SetWindowLongW
MoveWindow
ShowWindow
SetFocus
ModifyMenuW

gdi32

GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateRectRgnIndirect
GetStockObject
CreateBitmap
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegDeleteKeyW
RegQueryValueW
RegEnumKeyW

comctl32

ord17

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize
OleRun
CoCreateInstance
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

SysReAllocStringLen
SysAllocString
SysStringLen
SysFreeString
VariantInit
VariantClear
DispCallFunc
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocStringLen
VariantChangeType
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo

Sections

.text
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c860edcbf2a0d939553de47b3362e57d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 180KB - Virtual size: 178KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 180KB - Virtual size: 178KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 1KB