40410395428e3b053c646c5a544f1e360e0f887a9ef96336c275c0b61e1025d7

Sharing

Copy URL

Twitter E-mail

General

Target

40410395428e3b053c646c5a544f1e360e0f887a9ef96336c275c0b61e1025d7
Size

172KB
MD5

49a9cba539d12346adcb6839ceec8b9e
SHA1

6d2b95d45f5b84c2f7aa9ccdeda3e3e609e839cb
SHA256

40410395428e3b053c646c5a544f1e360e0f887a9ef96336c275c0b61e1025d7
SHA512

6498d83ef5ae0f00b8631973671dd0f9186a6336e41e7534ff2277521a5f76d58ea343af95ec662c1a3c68387906d386090c51bebd67a846dab35993d389b209
SSDEEP

3072:R8z1Rf1aNvk/OEpXjb7QtxUay1h5suNAg78drGuhIUlg+IDIOWU/G9pEm:RgfA5k/Os3Kq/1PsOeG0Imp

Score

N/A

Malware Config

Signatures

Files

40410395428e3b053c646c5a544f1e360e0f887a9ef96336c275c0b61e1025d7
.exe windows x86

2cf6cb3f5ee328d8976c1490244de29f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ImageList_Destroy

kernel32

GlobalAddAtomA
RtlUnwind
GetLocalTime
GetFileType
HeapFree
ExitProcess
RaiseException
TerminateProcess
CreateThread
HeapAlloc
GetModuleHandleA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetStartupInfoA
HeapDestroy
ExitThread
VirtualAlloc
SetStdHandle
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapSize
GlobalHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
GetLocaleInfoW
VirtualFree
GetVersionExA
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
GetCommandLineA
OpenEventA
OpenFile
CreateFileA
SetFilePointer
WriteFile
_lclose
CloseHandle
CreateMutexA
CreateEventA
WaitForSingleObject
ReleaseMutex
SetEvent
WaitForMultipleObjects
GetVolumeInformationA
GetFullPathNameA
DeleteFileA
FindFirstFileA
FindClose
SetEndOfFile
ReadFile
FlushFileBuffers
GetProcessVersion
GetCurrentProcess
WritePrivateProfileStringA
MulDiv
GlobalFlags
GetModuleFileNameA
SetLastError
lstrcpynA
TlsGetValue
lstrcpyA
SetErrorMode
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
GetEnvironmentStringsW
GlobalUnlock
GlobalFree
GetLastError
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetVersion
lstrcatA
GlobalGetAtomNameA
SuspendThread
SetThreadPriority
ResumeThread
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcmpA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetComputerNameA
GetSystemDirectoryA
LCMapStringA
LCMapStringW
HeapCreate

user32

CharUpperA
EndDialog
DestroyMenu
FindWindowA
InvalidateRect
GetSysColorBrush
WindowFromPoint
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
IsIconic
BringWindowToTop
LoadStringA
UnregisterClassA
LoadIconA
UpdateWindow
SystemParametersInfoA
MapWindowPoints
GetSysColor
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsWindowEnabled
IsChild
GetCapture
WinHelpA
GetClassInfoA
GetMenuItemCount
ShowWindow
LoadCursorA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
EnableWindow
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxExA
SendMessageA
wsprintfA
GetSystemMetrics
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
ReleaseDC
GetDC
GetDesktopWindow
SetWindowTextA
ClientToScreen
PtInRect
GetClassNameA
GetSubMenu
GetMenuItemID
GetDlgItem
GetMenu

gdi32

DeleteObject
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetObjectA
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
SetBkColor
SetTextColor
DeleteDC
CreateBitmap

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA
EnumPrintersA

advapi32

RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
AllocateAndInitializeSid
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAce
RegCloseKey
RegSetValueExA
RegQueryValueExA
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
RegOpenKeyA
FreeSid
RegSetKeySecurity

shell32

DragFinish
DragQueryFileA

rpcrt4

I_RpcGetBuffer
NdrConformantArrayUnmarshall
RpcRaiseException
RpcMgmtStopServerListening
RpcServerUseProtseqA
RpcServerRegisterIf
RpcServerInqBindings
RpcServerUnregisterIf
RpcEpRegisterA
RpcBindingVectorFree
RpcServerListen
RpcEpUnregister
NdrClientInitializeNew
NdrConformantArrayBufferSize
NdrGetBuffer
NdrConformantArrayMarshall
NdrSendReceive
NdrConvert
NdrFreeBuffer
NdrServerInitializeNew
I_RpcGetCurrentCallHandle
RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcBindingFree
RpcStringFreeA

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2cf6cb3f5ee328d8976c1490244de29f

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

rpcrt4

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 22KB - Virtual size: 36KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 22KB - Virtual size: 36KB

.rsrc
Size: 3KB - Virtual size: 2KB