18433ca8ce9eded624d98c72bc7f05ff9d51643a5b408cd399709dfbef1b5304

Sharing

Copy URL Twitter E-mail

General

Target

18433ca8ce9eded624d98c72bc7f05ff9d51643a5b408cd399709dfbef1b5304
Size

267KB
MD5

81468b7571ac6f9f026d312293a829a0
SHA1

c81232502d9f9a4d8e21586ae8941040e39a8ff8
SHA256

18433ca8ce9eded624d98c72bc7f05ff9d51643a5b408cd399709dfbef1b5304
SHA512

a64c35655ac927c413795e856f8ba24f7854a6cd340c0d8ddc99e384400146593a906f9193274f5c3a23b444a69fc5988b577233463e526f77fa51d769b39182
SSDEEP

6144:3zCfNQC6czceIoHuR7BY2d4B6wmaObJEtCJlFkxqMHBBdkeGB:3mN0ezOxYYbq2lqxqAiea

Score

N/A

Malware Config

Signatures

Files

18433ca8ce9eded624d98c72bc7f05ff9d51643a5b408cd399709dfbef1b5304
.exe windows x86

ff4bf75e5d123271176b90958ca02a5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

WindowFromPoint
WinHelpW
WinHelpA
WaitMessage
UpdateWindow
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TranslateAcceleratorA
TrackPopupMenu
SystemParametersInfoA
AnimateWindow
ShowWindow
ShowScrollBar
ShowCaret
SetWindowsHookExA
SetWindowTextW
SetWindowTextA
GetClassNameA
GetScrollPos
GetQueueStatus
EmptyClipboard
SetScrollInfo
GetFocus
GetCursorPos
SetWindowPos
SetWindowLongW
SetWindowLongA
SetTimer
SetParent
SetMenu
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetDlgItemTextA
SetCursorPos
SetCursor
SetClipboardData
SetClassLongA
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
SendDlgItemMessageA
ScrollWindow
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassExW
RegisterClassW
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
OpenClipboard
OffsetRect
OemToCharBuffA
OemToCharA
ModifyMenuW
ModifyMenuA
MessageBoxW
MessageBeep
MapWindowPoints
LoadMenuA
LoadImageA
LoadIconA
LoadCursorA
LoadBitmapA
LoadAcceleratorsA
KillTimer
IsWindowVisible
IsWindowEnabled
IsIconic
IsDlgButtonChecked
IsDialogMessageA
IsClipboardFormatAvailable
InvalidateRect
IntersectRect
InsertMenuA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowLongW
GetWindowLongA
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetParent
GetWindow
GetNextDlgTabItem
GetMessageA
GetMenuStringW
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetKeyboardState
GetKeyState
GetDlgItemTextW
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDC
GetClipboardFormatNameA
GetClipboardData
GetClientRect
GetClassNameW
GetClassInfoW
GetAsyncKeyState
FindWindowA
FillRect
ExitWindowsEx
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableMenuItem
DrawTextW
DrawTextA
DrawStateA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DispatchMessageA
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCaret
DeleteMenu
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateMDIWindowW
CreateCaret
CloseClipboard
CheckRadioButton
CheckMenuItem
CheckDlgButton
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuW
AppendMenuA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharUpperA
CharToOemBuffA
CharToOemA
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
MoveWindow
FlashWindowEx
CountClipboardFormats
IsWindow
MapVirtualKeyExA
DefFrameProcW
GetProcessDefaultLayout
RegisterHotKey
GetWindowModuleFileNameA
BeginDeferWindowPos
SetUserObjectInformationW
EndDialog
SetWindowRgn
GetWindowDC
CopyIcon
SetKeyboardState
IsZoomed
GetClassWord
SetSysColors
GetActiveWindow
CopyAcceleratorTableW
GetUserObjectInformationW
GetClassLongA
SetWinEventHook
GetCaretPos

comdlg32

GetOpenFileNameW
CommDlgExtendedError
ChooseColorA
ChooseFontA
GetSaveFileNameW

shell32

SHGetFolderPathW
ShellExecuteW
ShellExecuteA
SHGetFileInfoW
SHGetFileInfoA
ExtractIconW
ExtractIconA
ExtractAssociatedIconA
DragQueryPoint
DragQueryFileW
DragFinish
DragAcceptFiles

advapi32

OpenProcessToken
RegSetValueExW
RegSetValueExA
RegSetValueW
RegSetValueA
RegQueryValueExW
RegQueryValueW
RegQueryValueA
RegOpenKeyA
RegDeleteValueW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AdjustTokenPrivileges
GetUserNameW
LookupPrivilegeValueA
RegDeleteKeyW
RegCreateKeyA
RegCreateKeyW
RegDeleteKeyA

gdi32

CreateDIBitmap
CreateFontA
CreateFontIndirectA
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
EndDoc
EndPage
ExtCreatePen
ExtTextOutA
ExtTextOutW
CreateDIBSection
LineTo
MoveToEx
PtInRegion
Rectangle
RemoveFontResourceA
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetPixel
SetPixelV
SetStretchBltMode
SetTextAlign
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
AddFontResourceA
GetBkColor
AbortDoc
SetTextColor
StartDocA
StartDocW
StartPage
StretchBlt
StretchDIBits
TextOutA
TextOutW
GetCharABCWidthsFloatW
GetDIBits
GetDeviceCaps
GetObjectA
GetPixel
GetStockObject
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
CreateDCA
GetTextMetricsA

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Draw
ImageList_GetIconSize
CreateToolbarEx

version

VerQueryValueA
GetFileVersionInfoA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

kernel32

TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SetUnhandledExceptionFilter
SetThreadPriority
SetPriorityClass
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetFileAttributesA
SetEvent
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
MulDiv
MoveFileExW
MoveFileW
MoveFileA
MapViewOfFile
LockResource
LocalUnlock
LocalLock
LocalFree
LocalFileTimeToFileTime
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
IsBadWritePtr
IsBadReadPtr
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalMemoryStatus
GlobalHandle
GlobalLock
GlobalFree
GlobalDeleteAtom
FreeLibrary
FormatMessageW
FormatMessageA
TerminateThread
FlushFileBuffers
FindResourceA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemCodePagesA
EnumCalendarInfoA
EnterCriticalSection
DosDateTimeToFileTime
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateProcessW
CreateProcessA
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryW
CopyFileW
CompareStringW
CompareStringA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
VirtualAlloc
GetFileTime
SetHandleCount
GetProcessTimes
PurgeComm
GetTapeParameters
IsProcessInJob
CreateIoCompletionPort
GetCommModemStatus
GetLastError
FlushViewOfFile
DisableThreadLibraryCalls
QueueUserAPC
GetFileSizeEx
UnmapViewOfFile
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteFile
WriteProcessMemory
_hread
_hwrite
_lcreat
_lopen
_lread
lstrcatA
lstrcatW
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
SetFilePointerEx
FindFirstVolumeA
FindNextVolumeA
GetCPInfoExA
GetLongPathNameW
GetLongPathNameA
GetCommandLineA
GetStartupInfoA
GetModuleHandleW
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
TlsAlloc
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushInstructionCache

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff4bf75e5d123271176b90958ca02a5c

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

advapi32

gdi32

comctl32

version

winspool.drv

kernel32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 6KB - Virtual size: 102KB

.rsrc Size: 207KB - Virtual size: 206KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 6KB - Virtual size: 102KB

.rsrc
Size: 207KB - Virtual size: 206KB