d4ce4491fd9035020063c229cbd8c42263ab40abdf5f1434e72805a46e0c55c0

Sharing

Copy URL Twitter E-mail

General

Target

d4ce4491fd9035020063c229cbd8c42263ab40abdf5f1434e72805a46e0c55c0
Size

764KB
MD5

812d1b841a8e40f7c736e499fe694814
SHA1

8055831a60b52909d4297030f43c641e02cae674
SHA256

d4ce4491fd9035020063c229cbd8c42263ab40abdf5f1434e72805a46e0c55c0
SHA512

730336ba80c77c9f1d4adbaa6d0cb12bb3e92aa4d9c11cf229917e88242de2e3ef6a15508769451c3ae47f0c1480405852be4fbfbc726adbdb486070e7e49fd7
SSDEEP

12288:eloeBoYImn1VYLK11kobm3/kJXmYvqj1eRwRc38w0ur5L2gZdu2PbA:EoQ9j1VYA1kcHXdyG38w0urZw

Score

N/A

Malware Config

Signatures

Files

d4ce4491fd9035020063c229cbd8c42263ab40abdf5f1434e72805a46e0c55c0
.exe windows x86

44114a8f97eed08d1a72df9a106501dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
DragQueryFileA

winspool.drv

ord204
OpenPrinterA
GetPrinterA

advapi32

RegOpenKeyExA
InitializeSecurityDescriptor
RegSetKeySecurity
AddAce
FreeSid
GetLengthSid

gdi32

DeleteObject
SetBkColor
ExtSelectClipRgn
Pie
PolyBezierTo
MaskBlt
SetWindowExtEx
SelectObject
GetDeviceCaps
OffsetWindowOrgEx
Rectangle
ExtCreateRegion
CreateHatchBrush
ExcludeClipRect
ExtTextOutA
GetObjectType
GetPixel
DPtoLP
SetBkMode
GetNearestPaletteIndex
GetTextMetricsA
GetClipBox
ScaleWindowExtEx
GetBoundsRect
StretchBlt
SetMapMode
SetViewportOrgEx
GetOutlineTextMetricsA
CreateICA
GetGlyphOutlineA
FrameRgn
StretchDIBits
PolyPolygon
GetViewportOrgEx
CreatePen
CreateRectRgn
GetBitmapBits
SelectClipPath
PathToRegion
FillRgn
TextOutA
CopyMetaFileA
GetStockObject
CreateCompatibleBitmap
GetROP2
SetROP2
Polyline
ScaleViewportExtEx
CreateRectRgnIndirect
CreateDIBitmap
StrokeAndFillPath
ExtFloodFill
SetTextColor
GetNearestColor
GetFontData
SetBrushOrgEx
SetRectRgn
CreateEllipticRgnIndirect
GetTextFaceA

comctl32

ImageList_Create
ImageList_DrawEx
ImageList_DragEnter
InitCommonControlsEx
CreatePropertySheetPageA

kernel32

CreateDirectoryA
ExitProcess
IsBadCodePtr
GetLastError
GetVersionExA
GetModuleFileNameA
LeaveCriticalSection
HeapCreate
GetTickCount
GetStdHandle
LCMapStringW
VirtualQuery
GetStringTypeW
GetCPInfo
SetLastError
GetTimeFormatA
FlushInstructionCache
InterlockedExchange
GetOEMCP
CompareStringA
SetStdHandle
VirtualAlloc
RaiseException
HeapAlloc
UnhandledExceptionFilter
GetFileType
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
EnterCriticalSection
GetCurrentProcessId
GetStartupInfoA
WideCharToMultiByte
GlobalFindAtomA
GetDateFormatA
CompareStringW
ReadFile
VirtualFree
HeapDestroy
CreateThread
RemoveDirectoryA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
InitializeCriticalSection
QueryPerformanceCounter
GetSystemInfo
TerminateProcess
GetFileTime
GetWindowsDirectoryA
LoadLibraryA
SetEvent
MultiByteToWideChar
GetProcAddress
RtlUnwind
SetHandleCount
GetSystemTimeAsFileTime
GetCurrentThreadId
LCMapStringA
GetCommandLineA
SetFilePointer
TlsFree
HeapFree
TlsSetValue
WriteFile
GetEnvironmentStrings
HeapReAlloc
GetEnvironmentStringsW
GetACP
VirtualProtect
DeleteCriticalSection
CloseHandle
HeapSize
FileTimeToSystemTime
GetTimeZoneInformation
GetModuleHandleA
CreateMutexA
GetCurrentProcess
GetStringTypeA
GetLocaleInfoA
FlushFileBuffers
SetEnvironmentVariableA

user32

GetAsyncKeyState
DrawFrameControl
SetScrollPos
EndDialog
LoadCursorA
LoadMenuA
LoadAcceleratorsA
GetWindowThreadProcessId
ScrollWindow
CheckMenuItem
KillTimer
GetClientRect
MessageBoxA
IsChild
GetSubMenu
CallWindowProcA
GetParent
RegisterClassExA
GetCapture
TranslateMessage
SetTimer
PostThreadMessageA
DestroyWindow
GetTopWindow
InvalidateRect
PostMessageA
DestroyCursor
ShowWindow
SetCursor
WinHelpA
LoadBitmapA
RegisterClassA
GetFocus
ReleaseCapture
DestroyMenu
DefWindowProcA
GetForegroundWindow
DrawTextA
CopyRect
IsWindow
DrawStateA
CreatePopupMenu
IsMenu
IsWindowUnicode
DestroyIcon
CreateWindowExA
GetScrollPos
GetIconInfo
BringWindowToTop
GetMenuItemID
DestroyAcceleratorTable
AppendMenuA
IsWindowVisible
LoadIconA
GetMenu

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 476KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44114a8f97eed08d1a72df9a106501dc

Headers

File Characteristics

Imports

shell32

winspool.drv

advapi32

gdi32

comctl32

kernel32

user32

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 476KB - Virtual size: 473KB

.data Size: 108KB - Virtual size: 107KB

.rsrc Size: 80KB - Virtual size: 76KB

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 476KB - Virtual size: 473KB

.data
Size: 108KB - Virtual size: 107KB

.rsrc
Size: 80KB - Virtual size: 76KB