dccc590b13e91c41018e5699d8a3af16935a37cfbbf04dd600b8279d6ba47363

Sharing

Copy URL Twitter E-mail

General

Target

dccc590b13e91c41018e5699d8a3af16935a37cfbbf04dd600b8279d6ba47363
Size

682KB
MD5

794e87212591ddd7c592b1d9c85212e0
SHA1

e69e78075276f95c8db615872ddbbdeee2d012cf
SHA256

dccc590b13e91c41018e5699d8a3af16935a37cfbbf04dd600b8279d6ba47363
SHA512

188ab4a7e48359320d6660136c201593f352e4b031d7a8dfcdcd217d2056cafc5df562c29d828345ba76fa038483f39e055de66af21827e62916a8a2b8b7b416
SSDEEP

12288:Y1bwlnZi904VAmXRVZ/goZ4smF7tQj0DcIjkFNexbAo7/uJyHhCqUvhaKy:Y1MVX4Vt4oZ4smJVD/AFoxbAo73BCqLK

Score

N/A

Malware Config

Signatures

Files

dccc590b13e91c41018e5699d8a3af16935a37cfbbf04dd600b8279d6ba47363
.exe windows x86

96ccf387ef5411975a71ccdcc15016fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
ReadFile
ExitProcess
CloseHandle
InterlockedExchange
MultiByteToWideChar
GetStdHandle
LoadLibraryA
GetLocaleInfoA
IsValidCodePage
GetStartupInfoA
GetModuleHandleW
DeleteCriticalSection
WriteConsoleA
GetProcAddress
GetStartupInfoW
SetUnhandledExceptionFilter
GetStringTypeW
HeapCreate
TlsAlloc
VirtualQuery
LocalFree
GetCurrentThread
TlsSetValue
GetModuleFileNameA
WriteFile
CompareStringA
WriteConsoleW
Sleep
GetTickCount
GetCPInfo
GetCommandLineW
InterlockedIncrement
GetStringTypeA
SetConsoleCtrlHandler
SetLastError
IsDebuggerPresent
HeapReAlloc
FreeLibrary
UnhandledExceptionFilter
SetFilePointer
FlushFileBuffers
TlsGetValue
HeapSize
FatalAppExitA
WaitForSingleObject
GetModuleFileNameW
GetConsoleMode
HeapAlloc
VirtualAlloc
GetTimeZoneInformation
GetCurrentThreadId
GetOEMCP
RtlUnwind
SetStdHandle
VirtualFree
LCMapStringA
WideCharToMultiByte
GetTimeFormatA
SetEnvironmentVariableA
GetLocaleInfoW
GetDateFormatA
SetHandleCount
CreateFileA
GetConsoleCP
LeaveCriticalSection
IsValidLocale
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetCurrentProcess
InterlockedDecrement
TlsFree
GetFileType
GetModuleHandleA
EnterCriticalSection
GetSystemTimeAsFileTime
CreateMutexW
QueryPerformanceCounter
GetUserDefaultLCID
HeapFree
GetConsoleOutputCP
GetCurrentProcessId
GetACP
CompareStringW
HeapDestroy
GetLastError
LCMapStringW

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

user32

SetParent
EmptyClipboard
ScreenToClient
PostThreadMessageW
GetMenuState
RemovePropW
GetParent
DrawFocusRect
DeleteMenu
RegisterClassW
DrawStateW
WindowFromPoint
MessageBoxW
IsRectEmpty
GetMenuItemInfoW
GetMenuItemID
GetKeyState
GrayStringW
GetWindow
GetPropW
CreateMenu
TranslateAcceleratorW
DestroyCursor
TabbedTextOutW
ReleaseCapture
GetSystemMenu
IsWindow
SetCursor
SetWindowsHookExW
GetDCEx
SetFocus
GetWindowDC
GetClipboardData
CheckMenuItem
IsMenu
CreateWindowExW
SetDlgItemTextW
GetWindowThreadProcessId
InvalidateRect
GetDC
GetWindowRect
GetSysColor
SetPropW
SetForegroundWindow
EnableWindow
WinHelpW
DefWindowProcW
PtInRect
MessageBeep
SetWindowLongW
ValidateRect
DrawTextExW
EndDialog
LoadStringW
LoadMenuW
SetRectEmpty
GetDesktopWindow
UnhookWindowsHookEx
GetMessageW
SetMenu
DeferWindowPos
TrackPopupMenuEx
ClientToScreen
GetAncestor
GetMessagePos
RegisterClassExW
GetSystemMetrics
IntersectRect
IsChild
InvalidateRgn
DrawIconEx
SetTimer
DrawTextW
UnionRect
MoveWindow
GetForegroundWindow
IsWindowVisible
ShowWindow
DrawMenuBar
GetScrollPos
UnpackDDElParam
BringWindowToTop
RedrawWindow
LoadIconW
GetClassNameW
KillTimer
IsZoomed
SetMenuItemInfoW
RemoveMenu
IsClipboardFormatAvailable
OffsetRect
SendDlgItemMessageA
CopyAcceleratorTableW
RegisterClipboardFormatW
DestroyWindow
CallNextHookEx
UpdateWindow
SetWindowRgn
GetWindowLongW
InflateRect
GetFocus
DestroyIcon
DestroyMenu
GetCursorPos
CreateAcceleratorTableW
AdjustWindowRectEx
SetCapture
FillRect
DispatchMessageW
GetActiveWindow
GetClassLongW
GetScrollInfo
IsDialogMessageW

gdi32

SetBkMode
GetViewportExtEx
CloseMetaFile
CreateMetaFileA
CreateFontIndirectA
Polygon
DeleteDC
FillPath
SetROP2
SetPixel
SetTextCharacterExtra
CreateCompatibleDC
RestoreDC
SetWindowExtEx
Polyline
GetClipBox
CreateICA
GetViewportOrgEx
GetROP2
LPtoDP
SaveDC
CreatePolygonRgn
StrokeAndFillPath
ScaleViewportExtEx
OffsetClipRgn
GetBoundsRect
GetTextColor
StrokePath
SelectPalette
CreatePen
ScaleWindowExtEx
GetArcDirection
GetCharWidthA

comctl32

ord17
ImageList_SetImageCount
ImageList_Draw

advapi32

RegOpenKeyExA
CryptHashData
CryptDestroyKey
CryptReleaseContext
CryptCreateHash
RegOpenKeyA
CryptDestroyHash
RegCreateKeyExA

shlwapi

PathIsRootW
PathStripPathW
PathFindFileNameW
PathIsDirectoryW

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 450KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96ccf387ef5411975a71ccdcc15016fb

Headers

File Characteristics

Imports

kernel32

winspool.drv

user32

gdi32

comctl32

advapi32

shlwapi

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 450KB - Virtual size: 449KB

.data Size: 106KB - Virtual size: 106KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 450KB - Virtual size: 449KB

.data
Size: 106KB - Virtual size: 106KB

.rsrc
Size: 28KB - Virtual size: 28KB