782cc2f6c74091cf48b10bee7c650c0a73fb334fbbf19155e38b081f40549484

Sharing

Copy URL Twitter E-mail

General

Target

782cc2f6c74091cf48b10bee7c650c0a73fb334fbbf19155e38b081f40549484
Size

224KB
MD5

e4b1d10c27621b7d214f50fab5aa01dd
SHA1

bf967377880b19d9a25fc2052c3c70cb9ebfceeb
SHA256

782cc2f6c74091cf48b10bee7c650c0a73fb334fbbf19155e38b081f40549484
SHA512

9cd0294cfe2fb30b48b7e32b1ec06f683d5330191db69c3737d1d414b3ec4ba7e1003bca16416ca509b804a1a615294cf70ae653a6a9f90f56f0d5fec382484f
SSDEEP

6144:lUNJ/hTJrKwZPupXrUu+wYwh75bvDkj5/dmATAO:lgNrKwupXr/V50jtZEO

Score

N/A

Malware Config

Signatures

Files

782cc2f6c74091cf48b10bee7c650c0a73fb334fbbf19155e38b081f40549484
.exe windows x86

034ee377c0d94147e921ca1fc7c2dea5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadWritePtr
GetTimeZoneInformation
GetOEMCP
GetCommandLineW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCommandLineA
GetEnvironmentStringsW
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
HeapSize
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
TerminateProcess
HeapReAlloc
ExitProcess
RtlUnwind
GetStartupInfoW
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
GlobalFindAtomW
GetVersionExA
GetModuleHandleA
GlobalFlags
lstrcatW
WritePrivateProfileStringW
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CloseHandle
GlobalAddAtomW
GetCurrentThread
GetCurrentThreadId
lstrcmpW
FreeLibrary
GlobalDeleteAtom
GetModuleFileNameW
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
LoadLibraryW
GetLocaleInfoW
MultiByteToWideChar
WideCharToMultiByte
SetLastError
GlobalFree
lstrcpyW
lstrlenW
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
GetLocaleInfoA
GetACP
InterlockedExchange
CopyFileW
FindFirstFileW
FindNextFileW
DeleteFileW
GetWindowsDirectoryW
GetSystemDirectoryW
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryA
GetVersionExW
GetCurrentProcess
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleW
GetProcAddress
GetCPInfo

user32

DestroyMenu
RegisterWindowMessageW
WinHelpW
CreateWindowExW
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconW
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
DefWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
SetWindowLongW
GetDlgItem
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
SetWindowTextW
GetClassNameW
GetCapture
ClientToScreen
GetWindowTextW
UnhookWindowsHookEx
LoadCursorW
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassW
wsprintfW
CharUpperW
GetSystemMetrics
SetMenuItemBitmaps
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
SendMessageW
SetCursor
ShowWindow
PostQuitMessage
PostMessageW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxW
CallWindowProcW

gdi32

RectVisible
PtVisible
GetClipBox
SetMapMode
SetTextColor
TextOutW
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
GetDeviceCaps
ExtTextOutW

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
XcvDataW
OpenPrinterW
AddPrinterDriverW
AddPrinterW
DeletePrinterDriverW
DeletePrinterDriverExW
AddPrintProcessorW
GetPrintProcessorDirectoryW
GetPrinterDriverDirectoryW
EnumPrintersW
DeletePrintProcessorW
DeletePrinterKeyW
DeletePrinter
DocumentPropertiesW

advapi32

RegQueryValueExW
GetSecurityDescriptorControl
SetSecurityDescriptorDacl
AddAccessAllowedAce
AddAce
EqualSid
GetAce
InitializeAcl
GetLengthSid
GetAclInformation
GetSecurityDescriptorDacl
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
SetFileSecurityW
RegCloseKey
GetUserNameW
ControlService
OpenSCManagerW
OpenServiceW
StartServiceW
QueryServiceStatus
CloseServiceHandle
LookupAccountNameW
GetFileSecurityW
InitializeSecurityDescriptor

shell32

ShellExecuteW

comctl32

ord17

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oleaut32

VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

034ee377c0d94147e921ca1fc7c2dea5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 108KB - Virtual size: 106KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 72KB - Virtual size: 72KB

.text
Size: 108KB - Virtual size: 106KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 72KB - Virtual size: 72KB