5b5434f38da12b36b317423eafbf4764018548b080622dd2e1756e604ee36e4e

Sharing

Copy URL Twitter E-mail

General

Target

5b5434f38da12b36b317423eafbf4764018548b080622dd2e1756e604ee36e4e
Size

635KB
MD5

5cce6d57911cc4fc4a7b7fa587515230
SHA1

f147642df4da56e6721f6ebf6462241935befc59
SHA256

5b5434f38da12b36b317423eafbf4764018548b080622dd2e1756e604ee36e4e
SHA512

6e1a5813c73dde8442692baee3cdf2337139c626b9a6120b6247c87c4cd0423ccdb740932b4e530af736c278c1fe6d1f3f1e732fec8eaac3fce28341e2112edc
SSDEEP

12288:gv98Ite6WRr4rYIffb6ZBv4dX7Mal4+iEthRbZspP+:gvqIvpYIb6TalDiqXi0

Score

N/A

Malware Config

Signatures

Files

5b5434f38da12b36b317423eafbf4764018548b080622dd2e1756e604ee36e4e
.exe windows x86

a99f869344083d91f274773461e7fb96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleNumberOfCommandsW
SetLocalTime
VirtualUnlock
AssignProcessToJobObject
GlobalDeleteAtom
WriteConsoleInputW
FormatMessageW
FindNextVolumeMountPointW
GetLocalTime
Process32NextW
EnumDateFormatsExW
AddAtomA
GetProcAddress
GetEnvironmentStringsA
GetHandleInformation
WaitForMultipleObjectsEx
GetModuleHandleA
SetConsoleOutputCP
GetSystemTime
FreeLibrary
FlushInstructionCache
LoadLibraryA
IsValidLocale
VirtualAlloc
GetVersion

gdi32

GetCharWidthI
ExcludeClipRect
SelectClipPath
SetAbortProc
GetStockObject
CopyEnhMetaFileA
GetROP2
CreateEllipticRgnIndirect
AngleArc
CreateEnhMetaFileA
StartDocW
GetTextMetricsA
PtVisible
SetWorldTransform
MoveToEx
CreateCompatibleDC
SaveDC
GetTextExtentPointA
SetROP2
DeleteDC
DeviceCapabilitiesExW
GetEnhMetaFilePaletteEntries
GetTextCharsetInfo
ColorCorrectPalette
SetBoundsRect
StartPage
GetObjectA
GdiComment
CreateCompatibleBitmap
SetDCPenColor
TranslateCharsetInfo
CreateDIBSection
SelectClipRgn
GdiDeleteSpoolFileHandle
GdiFlush
EudcLoadLinkW
GetGlyphIndicesW
GetEnhMetaFileA
SetPixelFormat
GetOutlineTextMetricsW
GetMetaFileW
GetNearestPaletteIndex
SelectFontLocal
CreateDIBPatternBrush
SetMetaFileBitsEx
SetTextJustification
SelectObject
CombineRgn
SetBitmapBits
ExtEscape

advapi32

LsaQuerySecurityObject
ObjectDeleteAuditAlarmA
CreateRestrictedToken
LsaQuerySecret
LsaOpenAccount
AddAuditAccessAce
SystemFunction017
GetServiceDisplayNameW
LsaICLookupNames
SystemFunction028
RegisterServiceCtrlHandlerW
LsaQueryInformationPolicy
ChangeServiceConfigA
QueryServiceConfigW

shell32

StrRStrA
DoEnvironmentSubstA
SHGetSettings
ExtractIconExA
SHChangeNotify
StrChrIW
SHGetSpecialFolderPathW

opengl32

glScaled
glVertex3s
glColor4uiv
glStencilOp
wglDeleteContext
glEvalCoord2d
glColor3sv
wglCopyContext
glStencilMask
glEvalCoord2fv
glRasterPos4d
glVertexPointer
glTexCoord2fv
glLoadMatrixd
glVertex2d
glTexParameterfv
wglShareLists
glMatrixMode
glColor4iv
glDrawPixels
glPushClientAttrib
glVertex4s
glColor4ui
glBitmap
glTexCoord1dv
glTexGendv
glGetTexImage
glLightModeli
glGetTexParameterfv
glColor3ub
glAreTexturesResident
glVertex3dv
glTexCoord4iv
glEvalCoord1f
glNormal3iv
glPointSize
glLightModelfv
glMateriali
glGetTexParameteriv
glNormal3fv
glRectf
glVertex3fv
glIndexfv
glTexCoord4dv
glColor4i
glFogi
glRasterPos2dv
glTexGend
glGetBooleanv
glEndList
wglMakeCurrent
glNewList
glTexEnviv
wglCreateContext
glLoadMatrixf
glInitNames
glPolygonStipple
glPixelMapuiv
glDisable
glGetPixelMapusv
glTexCoord1s
glTexCoord3f
glTexGenfv
glEvalPoint2
glSelectBuffer
glGetLightfv
glTexCoord1d
glTexCoord2i
glNormal3b
glColor3b
glColor4sv
glDepthFunc
glVertex2dv
glEdgeFlagv
glLineStipple
glColor3d
glLogicOp
glEdgeFlag
glHint
glVertex2fv
glRasterPos3s
glColor4fv
glNormal3sv
glNormalPointer
glVertex3iv
glColor4dv
wglRealizeLayerPalette
glVertex4f

winmm

mciGetDeviceIDA
mciSendStringA
mciGetCreatorTask
midiOutGetDevCapsA
midiInUnprepareHeader
mciSendCommandA
waveOutGetPosition
waveInOpen
waveInGetDevCapsA
midiStreamOpen
wid32Message
mmioCreateChunk
midiOutLongMsg
midiStreamRestart
OpenDriver
waveOutPause
mixerGetLineControlsW
waveInPrepareHeader
joySetThreshold
mixerGetLineControlsA
waveInUnprepareHeader
mmioAdvance
mciSendStringW
mmioStringToFOURCCW
mciGetErrorStringA
mmioSetBuffer
mciGetErrorStringW
midiOutGetVolume
joyGetDevCapsW
WOWAppExit
PlaySoundA
wod32Message
midiStreamOut
waveOutBreakLoop
timeGetTime
sndPlaySoundW
mmioInstallIOProcW
timeBeginPeriod
midiStreamStop
mmTaskBlock
waveOutGetVolume
joyGetDevCapsA
waveInStart
waveInClose
DriverCallback
timeGetSystemTime
mmioFlush
midiOutCacheDrumPatches
midiStreamClose

winspool.drv

DocumentEvent
EndPagePrinter
EnumPrintersW
EnumPortsW
ord102
GetPrintProcessorDirectoryA
GetJobW
EnumJobsA
FreePrinterNotifyInfo
ord209
GetPrinterDataW
DeletePrintProvidorW
ResetPrinterA
ord214
AddMonitorW
DeleteFormW
StartDocDlgA
ord212
DeletePrinterDataExA
WaitForPrinterChange
DocumentPropertySheets
ord215
DeletePrinterKeyW
AddPrinterDriverExW
EnumPrintProcessorDatatypesW
DeletePrinterConnectionA
GetPrinterDataA
DeviceMode
EnumPrinterDataExA
AddPrinterConnectionA
ord205
CommitSpoolData
GetFormW
SeekPrinter
DevicePropertySheets
EnumMonitorsA
ExtDeviceMode
QueryColorProfile
FindClosePrinterChangeNotification
GetPrintProcessorDirectoryW
DeletePrinterDataExW
SetPrinterW
StartDocDlgW
DeleteMonitorA
DeletePrinterDriverExA
PrinterProperties
AddPortW
ResetPrinterW
SetPortW
ConvertUnicodeDevModeToAnsiDevmode
SetJobW
DeletePrintProcessorA
DocumentPropertiesA
AddPrinterDriverExA
DeletePrintProvidorA
DeletePrinterKeyA
DeletePrinter
DeletePrinterDataA
GetPrinterDriverA
GetPrinterW
ord213
AddPrintProcessorW
DocumentPropertiesW
DevQueryPrint
AddFormA
ord100
EnumFormsW
EnumPrintProcessorDatatypesA
EnumPrinterKeyW
EnumPortsA
AddPrintProcessorA
EnumPrinterDataA
OpenPrinterA
AddPortExW
DevQueryPrintEx
AddFormW
GetPrinterDriverDirectoryA
GetPrinterA
EnumJobsW
XcvDataW
GetPrinterDriverDirectoryW
ord208
EXTDEVICEMODE
SetFormA
ord256
DeviceCapabilitiesW
GetSpoolFileHandle
DeletePrinterDriverA
PlayGdiScriptOnPrinterIC
AddPortA
DeleteMonitorW

msvcrt

_mbsset
_mbsninc
_mbclen
fread
__lc_codepage
_mbsbtype
__setlc_active
__unDName
pow
asctime
__lconv_init
_endthread
_heapmin
_gcvt
printf
_mbslen
_ismbbprint
strtod
_wfopen
ferror
ftell
wcsxfrm
_except_handler2
_close
isdigit
__p__timezone
freopen
_unlink
gmtime
_chsize
_fcvt
fputs
__p__mbcasemap
_rmdir
_fileinfo
fopen
_strnicoll
iswalpha
_wcsnset
fputc
__iscsymf
_wmkdir
_wspawnl
__RTDynamicCast
_winmajor
fclose
_wgetenv
_execve
_lfind
_setmode
fwrite
_pwctype
memset
_wctime
fprintf
_ctype
calloc
isxdigit
sprintf
_XcptFilter
_adj_fdiv_m32i
_isnan
fwprintf
__p__winver
wscanf
_CIlog
_mbsicmp
_mbsnbicmp
_endthreadex
strncpy
fsetpos
fseek
sqrt
strncat
_osver
_findfirst
__CxxFrameHandler
feof
_Getmonths
_commit

Sections

.text
Size: 608KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a99f869344083d91f274773461e7fb96

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

shell32

opengl32

winmm

winspool.drv

msvcrt

Sections

.text Size: 608KB - Virtual size: 607KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 7KB

.text
Size: 608KB - Virtual size: 607KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 7KB