be26306ddf3a9e5ad76bcd1cb6beaf18454a4be4e2bc18b6a35719b45cfee17b

Sharing

Copy URL Twitter E-mail

General

Target

be26306ddf3a9e5ad76bcd1cb6beaf18454a4be4e2bc18b6a35719b45cfee17b
Size

760KB
MD5

9642438b00792471797fe3b5ed37044e
SHA1

2a79623f2f562e81d2f99e64c80f0ad4800b7e76
SHA256

be26306ddf3a9e5ad76bcd1cb6beaf18454a4be4e2bc18b6a35719b45cfee17b
SHA512

bd187a98deb98d9b909cb98b936de7542bd1b4ba5452e9c71a05af38e347595f341c64baa7093eb48fd6cfa5988346259cabb56ae8bd1612bc1b1332c6472626
SSDEEP

12288:y3Bzy9KLNcUtPhHqV7S9w/lJjSiBxfmkD7kkRnNmBIB82x0ykiCtF5T:aBuutImiBR37kkkZiCtr

Score

N/A

Malware Config

Signatures

Files

be26306ddf3a9e5ad76bcd1cb6beaf18454a4be4e2bc18b6a35719b45cfee17b
.exe windows x86

830c80fc440e3c47f470ed6da61bed24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
HeapSize
GetTimeZoneInformation
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
GetACP
GetEnvironmentVariableA
TerminateProcess
GetEnvironmentStrings
GetEnvironmentStringsW
RaiseException
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetDiskFreeSpaceA
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
GetCurrentThreadId
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
ExitProcess
HeapAlloc
HeapFree
RtlUnwind
GetFileTime
GetFileSize
GetFileAttributesA
SetErrorMode
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsValidLocale
lstrcpynA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrcmpiA
InterlockedIncrement
InterlockedDecrement
FindResourceA
SizeofResource
LoadResource
LockResource
SetFileTime
SetFileAttributesA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
Sleep
GetLogicalDrives
CreateEventA
ResetEvent
WaitForSingleObject
CreateFileA
DeviceIoControl
IsValidCodePage
WritePrivateProfileStringA
InterlockedExchange
GetProfileStringA
GetThreadLocale
FileTimeToLocalFileTime
LocalReAlloc
FileTimeToSystemTime
TlsGetValue
TlsFree
TlsSetValue
GlobalReAlloc
LocalAlloc
GlobalHandle
TlsAlloc
EnterCriticalSection
GlobalFlags
GetProcessVersion
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FormatMessageA
MulDiv
SetLastError
lstrcatA
LocalFree
GetVersion
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
GetTickCount
lstrcpyA
GetModuleHandleA
GlobalUnlock
GlobalFree
GlobalAlloc
GetModuleFileNameA
GlobalLock
GetCurrentThread
GlobalDeleteAtom
lstrcmpA
GetLocaleInfoA
EnumSystemLocalesA
CloseHandle
GetUserDefaultLCID
SetHandleCount
SetEnvironmentVariableA

user32

InvalidateRect
InflateRect
DestroyMenu
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
DestroyIcon
LoadStringA
GetDesktopWindow
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
RegisterClipboardFormatA
EndDialog
CharUpperA
UpdateWindow
SendDlgItemMessageA
GetClassInfoA
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetWindowRect
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

DeleteObject
GetViewportExtEx
GetWindowExtEx
GetDeviceCaps
CreateSolidBrush
RectVisible
TextOutA
PtVisible
ExtTextOutA
PatBlt
Escape
GetBkColor
DPtoLP
GetTextColor
GetMapMode
LPtoDP
CreateDIBitmap
CreateCompatibleDC
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPointA
BitBlt
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA

shell32

ExtractIconA

comctl32

ord17

oledlg

ord8

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoGetClassObject
CoRegisterMessageFilter
StringFromCLSID
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
OleUninitialize
CoTaskMemAlloc
CoDisconnectObject

olepro32

ord253

oleaut32

VariantCopy
VariantTimeToSystemTime
LoadTypeLi
SysFreeString
SysAllocStringByteLen
SysStringLen
SysStringByteLen
SysAllocString
SysAllocStringLen
VariantChangeType
VariantClear

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zmajheq
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

830c80fc440e3c47f470ed6da61bed24

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 252KB - Virtual size: 251KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 24KB - Virtual size: 40KB

.rsrc Size: 424KB - Virtual size: 424KB

zmajheq Size: - Virtual size: 4KB

.text
Size: 252KB - Virtual size: 251KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 24KB - Virtual size: 40KB

.rsrc
Size: 424KB - Virtual size: 424KB

zmajheq
Size: - Virtual size: 4KB