e9423c319a8c7c89f12284159ff2b66c8685cacff56db4ddfe74c680eac77bb2

Sharing

Copy URL Twitter E-mail

General

Target

e9423c319a8c7c89f12284159ff2b66c8685cacff56db4ddfe74c680eac77bb2
Size

844KB
MD5

4dbfd5c953177cf6a3aabf586dfc5fe9
SHA1

b0cd684afd164757873262fcd67aae77d949978b
SHA256

e9423c319a8c7c89f12284159ff2b66c8685cacff56db4ddfe74c680eac77bb2
SHA512

89e73d33f297b18113bf1d5ede11d6efea5ad246d5478d293f012a6136fa0d77125938beb9d3defedd83b1ccab6e55d76a86317e22591f65297258817f922233
SSDEEP

24576:rTFS8D9nU349kUEHfkMrgQwvnorsAQHD4D2w4AbZWJvLow1:QQy34eUKfkLoQAQju2w4Adgvt

Score

N/A

Malware Config

Signatures

Files

e9423c319a8c7c89f12284159ff2b66c8685cacff56db4ddfe74c680eac77bb2
.exe windows x86

0a8214eb80ef09971da3a4192963b678

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptDestroyKey
RegQueryValueA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegOpenKeyExA
RegDeleteKeyA

kernel32

CompareStringA
GetACP
LCMapStringA
GetStdHandle
IsValidCodePage
GetFileType
SetConsoleCtrlHandler
TlsSetValue
LoadLibraryA
WideCharToMultiByte
LCMapStringW
ReadFile
lstrlenA
SetFilePointer
GetProcAddress
FatalAppExitA
VirtualFree
FreeLibrary
SetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
CreateFileA
GetCurrentThread
RtlUnwind
QueryPerformanceCounter
GetConsoleOutputCP
LeaveCriticalSection
CreateMutexA
DebugBreak
GetModuleFileNameW
HeapDestroy
GetUserDefaultLCID
MultiByteToWideChar
SetUnhandledExceptionFilter
EnumSystemLocalesA
GetStringTypeW
HeapReAlloc
SetEnvironmentVariableA
GetOEMCP
GetVersionExA
GetEnvironmentStrings
GetLocaleInfoW
ExitProcess
IsDebuggerPresent
InterlockedExchange
GetLastError
GetLocaleInfoA
LoadLibraryW
DeleteCriticalSection
GetEnvironmentStringsW
GetModuleHandleA
GetCurrentThreadId
GetConsoleCP
GetCommandLineA
IsBadReadPtr
SetFileTime
CompareStringW
VirtualQuery
HeapCreate
SetLastError
TlsGetValue
GetCPInfo
WriteConsoleA
InitializeCriticalSection
GetCurrentProcessId
CloseHandle
SetHandleCount
GetSystemTimeAsFileTime
GetStringTypeA
WriteConsoleW
HeapFree
VirtualAlloc
GetConsoleMode
OutputDebugStringW
RaiseException
HeapAlloc
FlushFileBuffers
GetTickCount
GetTimeZoneInformation
FreeEnvironmentStringsA
OutputDebugStringA
TerminateProcess
GetStartupInfoA
WriteFile
TlsAlloc
EnterCriticalSection
GetTimeFormatA
HeapValidate
InterlockedIncrement
GetDateFormatA
GetCurrentProcess
TlsFree
GetProcessHeap
IsValidLocale
FreeEnvironmentStringsW
InterlockedDecrement

winspool.drv

ClosePrinter
ord204
OpenPrinterA

gdi32

Escape
DeleteMetaFile
SetColorAdjustment
GetBkColor
GetGlyphOutlineA
PtVisible
LineTo
CreateEnhMetaFileA
SetWindowOrgEx
FloodFill
CreateFontIndirectA
SetTextColor
GetOutlineTextMetricsA
GetTextExtentPointA
RestoreDC
UpdateColors
CopyMetaFileA
SelectClipRgn
PlayMetaFileRecord
SaveDC
PolyDraw
SetStretchBltMode
SetBkColor
GetStockObject
OffsetRgn
ArcTo
AngleArc
CreateHalftonePalette
CreateRectRgn
FillRgn
GetRgnBox
FrameRgn
CreateBitmap
AbortDoc
GetTextColor
GetNearestPaletteIndex
CreateDIBPatternBrushPt
CreateBrushIndirect
GetROP2
SetBitmapDimensionEx
GetMapMode
EnumMetaFile
FillPath
SetViewportOrgEx
Ellipse
CloseEnhMetaFile
SetPaletteEntries
EndPage
SelectPalette
EndPath
GetWindowExtEx
GetCharABCWidthsA
CreateBitmapIndirect
DrawEscape
GetTextExtentPoint32A
CreateSolidBrush
TextOutA
BeginPath
GetPath
GetKerningPairsA
StrokePath
PatBlt
ExcludeClipRect
GetViewportExtEx
CreatePolygonRgn
GetTextFaceA
CreateCompatibleDC
ExtFloodFill
BitBlt
GetPolyFillMode
EndDoc
SetTextCharacterExtra
CreateRectRgnIndirect
PolyBezier
CreateFontA
SetAbortProc
ExtTextOutA
PaintRgn
GetMiterLimit
ExtCreatePen
AbortPath
PlgBlt
Rectangle
GetBitmapDimensionEx
GetCharABCWidthsFloatA
StartPage
OffsetViewportOrgEx
RectInRegion
GetWindowOrgEx
CreateEllipticRgnIndirect
MaskBlt
SetBkMode
CreateDiscardableBitmap
GdiComment
StretchBlt
ExtSelectClipRgn
GetNearestColor
GetCharWidthFloatA
Polygon
OffsetClipRgn
Polyline
CloseMetaFile
GetBrushOrgEx
CreatePolyPolygonRgn
SetMiterLimit
Arc
ExtEscape
GetStretchBltMode
FlattenPath
GetColorAdjustment
WidenPath
SetROP2
DPtoLP
PolyPolyline
CombineRgn
CloseFigure
AnimatePalette
SetBitmapBits
CreateMetaFileA
GetBkMode
SelectClipPath
PlayMetaFile
EnumObjects
SetMapperFlags
SetTextJustification
GetCurrentPositionEx
LPtoDP
CreatePalette
StartDocA
SetWindowExtEx
CreateDIBitmap
SetPolyFillMode
SetViewportExtEx
GetFontData
GetAspectRatioFilterEx
CreateRoundRectRgn
Pie
GetTextAlign
GetCharWidthA
RectVisible
GetCurrentObject

shlwapi

PathIsDirectoryA
SHCopyKeyA

user32

MessageBeep
PostQuitMessage
DestroyWindow
SetScrollPos
SetRectEmpty
LoadBitmapA
GetMessageA
GetDC
GetActiveWindow
LoadCursorA
SetDlgItemTextA
ShowWindow
GetWindowTextLengthA
DestroyCursor
GetDlgCtrlID
IsRectEmpty
EnableWindow
IsWindowVisible
GetForegroundWindow
GetSysColorBrush
GetLastActivePopup
FindWindowA
RegisterClassA
IsWindowEnabled
AppendMenuA
GetKeyState
MapWindowPoints
ShowCaret
LoadAcceleratorsA
DestroyIcon
SetTimer
GetSubMenu
CharNextA
CreateWindowExA
ScreenToClient
GetClassNameA
IsMenu
InvalidateRgn
IsChild
UnionRect
GetWindowThreadProcessId
CreateCaret
wsprintfA
IsDialogMessageA
RegisterClassExA
GetMenu
GetWindowLongA
GetClientRect
BringWindowToTop
GetDlgItem
GetWindowDC
InvalidateRect
GrayStringA
MapDialogRect
FillRect
RegisterClipboardFormatA
CallNextHookEx
ReleaseDC
MessageBoxA
GetDlgItemTextA
FrameRect
SetForegroundWindow
BeginPaint
TranslateMessage
OffsetRect
ExitWindowsEx
SetActiveWindow
DefWindowProcA
EndPaint

comctl32

ImageList_GetIcon
InitCommonControlsEx
ord17
ImageList_EndDrag
ImageList_SetBkColor
ImageList_Destroy
ImageList_Create
ImageList_DragMove
PropertySheetA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 492KB - Virtual size: 491KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a8214eb80ef09971da3a4192963b678

Headers

File Characteristics

Imports

advapi32

kernel32

winspool.drv

gdi32

shlwapi

user32

comctl32

version

Sections

.text Size: 224KB - Virtual size: 221KB

.rdata Size: 492KB - Virtual size: 491KB

.data Size: 100KB - Virtual size: 98KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 224KB - Virtual size: 221KB

.rdata
Size: 492KB - Virtual size: 491KB

.data
Size: 100KB - Virtual size: 98KB

.rsrc
Size: 24KB - Virtual size: 21KB