5ef4308df5e3d47aa5a003e9b962c5d2c5440f2a90fa2f81dc9dda5dfb1f7234

Sharing

Copy URL Twitter E-mail

General

Target

5ef4308df5e3d47aa5a003e9b962c5d2c5440f2a90fa2f81dc9dda5dfb1f7234
Size

288KB
MD5

801b19ea1471c94c0a0e8016d4562340
SHA1

966d89a2375f6c18da2f129b53896b3778827a6c
SHA256

5ef4308df5e3d47aa5a003e9b962c5d2c5440f2a90fa2f81dc9dda5dfb1f7234
SHA512

570b299f965d8a55716164bfdbf697b91a77cdf208142879f434f919379600876b598a4fde8c92902363e3c1069523908dc5d66b5041a502b504cf0536a53990
SSDEEP

3072:ZEkaQVF4iosF3G9ARP89OmzE5n4FBloOYMZjJDXrpCNOtnGMoNaUtnZ6I3bszzoN:7/oGRP89OH9KuOYWYtZxLmzo0naGy

Score

N/A

Malware Config

Signatures

Files

5ef4308df5e3d47aa5a003e9b962c5d2c5440f2a90fa2f81dc9dda5dfb1f7234
.exe windows x86

ca47ba32a535e6232abbb11c2670d497

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetACP
GetProfileStringA
HeapSize
HeapReAlloc
RaiseException
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapFree
RtlUnwind
HeapAlloc
FormatMessageA
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetOEMCP
GetCPInfo
GetThreadLocale
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
MulDiv
SetLastError
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleFileNameA
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrlenA
InterlockedDecrement
InterlockedIncrement
FindResourceA
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
FreeLibrary
CreateMutexA
GetLastError
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
VirtualFreeEx
CloseHandle
GetModuleHandleA
GetProcAddress
WideCharToMultiByte
SetUnhandledExceptionFilter
MultiByteToWideChar

user32

CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
InflateRect
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
PostQuitMessage
DrawTextA
ReleaseDC
SetWindowPos
PtInRect
PostMessageA
SendMessageA
UnregisterClassA
HideCaret
MoveWindow
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
SetForegroundWindow
SetWindowRgn
RedrawWindow
GetDC
GetParent
InvalidateRect
IsWindow
GetDesktopWindow
GetWindowRect
IsIconic
GetSystemMetrics
GetClientRect
SetWindowContextHelpId
DrawIcon
GetWindowLongA
SetWindowLongA
LoadIconA
CopyRect
EnableWindow
ClientToScreen
OffsetRect
FindWindowA
FindWindowExA
GetWindow
IsWindowUnicode
GetWindowThreadProcessId
DestroyMenu
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetClassNameA
LoadCursorA
LoadStringA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ShowWindow
UpdateWindow
SetWindowTextA
IsDialogMessageA
PeekMessageA
LoadBitmapA

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
RestoreDC
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
SelectObject
CreateDIBSection
DeleteObject
DeleteDC
GetObjectA
GetPixel
CreatePolygonRgn
CreateFontA
GetStockObject
CreateCompatibleDC
BitBlt
CreateDIBitmap
GetTextExtentPointA
CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

comctl32

_TrackMouseEvent
ord17

oledlg

ord8

ole32

CreateStreamOnHGlobal
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoRevokeClassObject

olepro32

ord253

oleaut32

VariantClear
SysFreeString
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysAllocStringLen

gdiplus

GdipCloneBrush
GdipCreateSolidFill
GdipDrawString
GdipCreateFontFamilyFromName
GdipCreateFont
GdipDeleteFontFamily
GdipDeleteFont
GdipDeleteBrush
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDrawImageI
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectRectI
GdipCloneImage
GdipDisposeImage
GdipFree
GdipAlloc
GdipLoadImageFromStream
GdipLoadImageFromStreamICM

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca47ba32a535e6232abbb11c2670d497

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

gdiplus

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 84KB - Virtual size: 83KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 84KB - Virtual size: 83KB