8021feac2fed3b47604a16bdc4e202946f3a65f4e3be22c47a828e70438c90fa

Sharing

Copy URL Twitter E-mail

General

Target

8021feac2fed3b47604a16bdc4e202946f3a65f4e3be22c47a828e70438c90fa
Size

491KB
MD5

7c07b12a6186589275537cb6418be221
SHA1

9950f6d70603817e619e4f7af652a1d70e406398
SHA256

8021feac2fed3b47604a16bdc4e202946f3a65f4e3be22c47a828e70438c90fa
SHA512

7c705050e3e4ee51aef59d19d50b874f12551fd43c7bcd33ad3170275f034eb82c6b0c80bba7034db4998ad2acc0224501e9c886aa197db1b52ce22da75f2dbd
SSDEEP

12288:zs/Ghdgr1S652uswwwwwwwwwwwwwwwwwwww8wwwwewwwwwwwwwwwwwwwwwwwwww8:+1Se2lwwwwwwwwwwwwwwwwwwww8wwwwm

Score

N/A

Malware Config

Signatures

Files

8021feac2fed3b47604a16bdc4e202946f3a65f4e3be22c47a828e70438c90fa
.exe windows x86

a9aaa69111e2c41daa15e6e36f69f3e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetModuleFileNameW
InterlockedDecrement
GetModuleHandleA
lstrcmpA
GlobalHandle
WriteFile
SetFilePointer
FlushFileBuffers
GetTickCount
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
HeapSize
HeapReAlloc
Sleep
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalAlloc
FormatMessageW
LocalFree
GlobalFlags
GlobalFree
GetCurrentThreadId
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
LoadLibraryA
MultiByteToWideChar
GetVersionExA
GlobalLock
GlobalUnlock
GetCurrentProcessId
GetProcAddress
LoadLibraryW
GlobalAddAtomW
SetLastError
WideCharToMultiByte
FindResourceW
ExitProcess
CreateMutexW
SizeofResource
LockResource
LoadResource
GetModuleHandleW
FindResourceA
lstrcmpW
HeapFree
lstrlenA
lstrcatA
lstrcpyA
ReadFile
GetProcessHeap
HeapAlloc
GetFileSize
OpenFile
GetModuleFileNameA
ResumeThread
lstrcpyW
lstrlenW
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
SuspendThread
OpenProcess
CloseHandle
GetLastError
InterlockedIncrement
GetCurrentProcess

user32

GetSysColorBrush
PostQuitMessage
RegisterClipboardFormatW
ClientToScreen
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
MessageBoxW
GetClassInfoExW
AdjustWindowRectEx
DefWindowProcW
GetWindowPlacement
GetClientRect
PtInRect
GetWindowRect
GetSystemMetrics
GetSysColor
DestroyMenu
WinHelpW
SetWindowPos
IsWindowEnabled
GetDlgItem
GetDlgCtrlID
GetKeyState
PeekMessageW
GetCapture
GetParent
IsIconic
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetClassInfoW
SetTimer
GetForegroundWindow
GetClassNameW
FindWindowExW
GetWindowThreadProcessId
CopyRect
GetMenu
GetLastActivePopup
PostMessageW
SetMenu
GetWindow
GetWindowLongW
IsWindow
MoveWindow
SendMessageW
SetWindowTextW
ShowWindow
SetForegroundWindow
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ValidateRect
UpdateWindow
GetDC
CallWindowProcW
CreateWindowExA
CreateWindowExW
SetWindowLongW
SendMessageA
ReleaseDC
DefWindowProcA
GetWindowTextA
SetWindowRgn
EnableWindow
LoadCursorW
LoadIconW
RegisterClassW
GetMessageW
TranslateMessage
DispatchMessageW
SystemParametersInfoA
GetWindowTextW

gdi32

ScaleWindowExtEx
DeleteObject
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
ExtTextOutW
SaveDC
RestoreDC
CreateDIBitmap
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreateRoundRectRgn
ScaleViewportExtEx
SetWindowExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
Escape
TextOutW
RectVisible
PtVisible
SetViewportExtEx
GetDeviceCaps

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW

ws2_32

sendto
htons
inet_addr
WSAStartup
socket
WSACleanup
closesocket

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9aaa69111e2c41daa15e6e36f69f3e3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

oleacc

winspool.drv

oleaut32

Sections

.text Size: 114KB - Virtual size: 114KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 297KB - Virtual size: 300KB

.reloc Size: 41KB - Virtual size: 41KB

.text
Size: 114KB - Virtual size: 114KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 297KB - Virtual size: 300KB

.reloc
Size: 41KB - Virtual size: 41KB