822a9fd8110b832973a15a72f8bce333c1955d116735766b344e2f859a86eff5

Sharing

Copy URL Twitter E-mail

General

Target

822a9fd8110b832973a15a72f8bce333c1955d116735766b344e2f859a86eff5
Size

280KB
MD5

4a3f0ab25ba46879f3c520332ee8fcf6
SHA1

67c1247dbb6307c83c68675fa6901f976f6c5204
SHA256

822a9fd8110b832973a15a72f8bce333c1955d116735766b344e2f859a86eff5
SHA512

4ca4916c3a89d673ea2cfd97b0e5f9cfd7f73446fce6639cedee51c42df377eb6ab2353701f742c0043e9fcfeeef41cd2bf22ffcab303efa941dcb9cc9d3704c
SSDEEP

6144:fvVsHn3TBvVKJeBgnb6O7vOm1n0smYNEqCsSCKG:lyvnOnJTeYNEPCKG

Score

N/A

Malware Config

Signatures

Files

822a9fd8110b832973a15a72f8bce333c1955d116735766b344e2f859a86eff5
.exe windows x86

a0723df06638a97b8f12532f18ea3d67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoCreateInstance

kernel32

RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
RaiseException
HeapReAlloc
HeapSize
GetCPInfo
GetModuleHandleA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetACP
GetOEMCP
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
VirtualAlloc
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
WaitForSingleObject
CloseHandle
GlobalLock
SetErrorMode
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
MulDiv
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
FindNextFileA
SetLastError
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
GetFileType
FindClose
lstrcmpiA
GlobalAlloc
lstrcpyA
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteFileA
SetEndOfFile
HeapDestroy
UnlockFile
GlobalDeleteAtom
GetVersionExA
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
ReleaseMutex
CreateMutexA
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
lstrcmpA
GetLastError
GetCurrentThread
GetCurrentProcess
GetUserDefaultLangID
GetSystemDirectoryA
GetModuleFileNameA
RemoveDirectoryA
SetCurrentDirectoryA
WinExec
SetFileAttributesA
CreateDirectoryA
CopyFileA
GetTempFileNameA
GetTempPathA
GetCurrentDirectoryA
MultiByteToWideChar
HeapFree
FormatMessageA
HeapAlloc
GetCurrentThreadId
GetProcessHeap

user32

ScrollWindow
ScreenToClient
EndDeferWindowPos
BeginDeferWindowPos
SetScrollInfo
GetClientRect
DeferWindowPos
AdjustWindowRectEx
GetSysColor
MapWindowPoints
SystemParametersInfoA
GetClassNameA
PtInRect
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetSysColorBrush
LoadStringA
CopyRect
InvalidateRect
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
WinHelpA
SetMenu
GetMenu
GetClassInfoA
LoadMenuA
DestroyMenu
GetDesktopWindow
GetWindow
GetCapture
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
SetScrollRange
ShowScrollBar
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
SetFocus
IsWindowEnabled
SetWindowLongA
GetDlgCtrlID
GetWindowTextA
SetWindowTextA
GetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
SetCursor
ShowOwnedPopups
SendMessageA
PostQuitMessage
EnableWindow
KillTimer
PostMessageA
SetTimer
LoadIconA
FindWindowA
UpdateWindow
GetTopWindow
GetScrollPos
SetScrollPos
IsChild
RegisterClassA
DefWindowProcA
SetPropA
CreateWindowExA
GetClassLongA
SetForegroundWindow
UnhookWindowsHookEx
GetForegroundWindow
RemovePropA
GetPropA
CallWindowProcA
GetWindowRect
GetMessageTime
GetMessagePos
IsIconic
GetLastActivePopup
BringWindowToTop
EqualRect
EndDialog
CharUpperA
ShowWindow
SetWindowPos
wsprintfA
WindowFromPoint
UnregisterClassA

gdi32

SetTextColor
GetObjectA
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateBitmap
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetBkColor

comdlg32

GetFileTitleA

winspool.drv

AddPrinterDriverA
DeleteMonitorA
AddMonitorA
GetPrinterDriverA
DocumentPropertiesA
SetPrinterA
GetPrinterA
EnumPrintersA
GetPrinterDriverDirectoryA
EnumPrinterDriversA
OpenPrinterA
ClosePrinter

advapi32

RegEnumValueA
CopySid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
EqualSid

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Destroy

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a0723df06638a97b8f12532f18ea3d67

Headers

File Characteristics

Imports

ole32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 19KB - Virtual size: 32KB

.rsrc Size: 70KB - Virtual size: 72KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 19KB - Virtual size: 32KB

.rsrc
Size: 70KB - Virtual size: 72KB