b2fac66ca09507fdbc01fae4312e1ccaf308eda216cd79bce8549bce1e50eaff

Sharing

Copy URL

Twitter E-mail

General

Target

b2fac66ca09507fdbc01fae4312e1ccaf308eda216cd79bce8549bce1e50eaff
Size

356KB
MD5

923d0609a90ee85c69d8599441cb1534
SHA1

14d232ffe4df2dfadd20966f7275fecd5c969816
SHA256

b2fac66ca09507fdbc01fae4312e1ccaf308eda216cd79bce8549bce1e50eaff
SHA512

a747fa547b5b247445cf04be17096f146d3db39c53fc43750d7499ac1eb013de42428abf90622b0fdaff7519efd3d3b1617dbc9e322d6f192d8b315796be65ba
SSDEEP

3072:6cZPbtLjy/7rQsxe/ewf0zgG0P0KA2Yy4Gmb:xFbtHyMPN10KADyvm

Score

N/A

Malware Config

Signatures

Files

b2fac66ca09507fdbc01fae4312e1ccaf308eda216cd79bce8549bce1e50eaff
.exe windows x86

ece1b5fa91ff04fb47d8acb737149846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList

kernel32

RtlUnwind
GetStartupInfoA
ExitProcess
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
TerminateProcess
GetACP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteFile
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetProcessVersion
LoadLibraryA
FreeLibrary
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetProcAddress
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalLock
GetLastError
GlobalHandle
GlobalUnlock
TlsAlloc
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersionExA
GetModuleFileNameA
GetPrivateProfileStringA
GlobalAlloc
GlobalFree
LocalAlloc
lstrlenA
SetLastError
GetCommandLineA
GetModuleHandleA
GetCurrentProcess
LocalFree
CloseHandle
UnhandledExceptionFilter

user32

GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetClientRect
CopyRect
SetFocus
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
AdjustWindowRectEx
LoadStringA
EnableWindow
UnhookWindowsHookEx
DispatchMessageA
SendMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
AdjustTokenPrivileges
RegCloseKey
AllocateAndInitializeSid
SetEntriesInAclA
SetNamedSecurityInfoA
OpenProcessToken
FreeSid
LookupPrivilegeValueA

comctl32

ord17

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ece1b5fa91ff04fb47d8acb737149846

Headers

File Characteristics

Imports

setupapi

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 8KB - Virtual size: 19KB

.rsrc Size: 44KB - Virtual size: 41KB

.grdata Size: 80KB - Virtual size: 80KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 8KB - Virtual size: 19KB

.rsrc
Size: 44KB - Virtual size: 41KB

.grdata
Size: 80KB - Virtual size: 80KB