f7172e592253f6b1f36a00bf0312418b618ed85a26c498a99bf35d1e061b2f5f

Sharing

Copy URL Twitter E-mail

General

Target

f7172e592253f6b1f36a00bf0312418b618ed85a26c498a99bf35d1e061b2f5f
Size

440KB
MD5

03e1ee2d6114d3d9e00bf18afa392310
SHA1

2d7bda19332415143b68d14c3c41f74225ab7ca3
SHA256

f7172e592253f6b1f36a00bf0312418b618ed85a26c498a99bf35d1e061b2f5f
SHA512

dc17e9191f987c187243e8b9f615e4e4d3d6f5963f9bcd16f95286fdf952e7eea0353c8706d402450319a37cbdfd97442e7ed3e4b5428bc14005556ea0ca86ae
SSDEEP

6144:IWajyALXoZGCtVlYuqqCLTW5135IO0ZxEPqB5CmVIqroxtbx32X0u3:IWaOMXodhqA58pbIq87de3

Score

N/A

Malware Config

Signatures

Files

f7172e592253f6b1f36a00bf0312418b618ed85a26c498a99bf35d1e061b2f5f
.exe windows x86

3a78c925959f3ebbaf584f2ba636ddd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
VirtualAlloc
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
HeapSize
ExitProcess
GetACP
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapCreate
GetStdHandle
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
Sleep
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
GetOEMCP
GetCPInfo
GetLocaleInfoA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GetVersionExA
GetThreadLocale
GlobalGetAtomNameA
GlobalFlags
lstrcmpA
GetCurrentThreadId
CloseHandle
InterlockedIncrement
FreeLibrary
InterlockedDecrement
GetModuleHandleA
GetProcAddress
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetCurrentProcessId
GetModuleFileNameA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
FindResourceA
LoadResource
LockResource
SizeofResource
SetLastError
PrepareTape
CompareStringA
GetVersion
VirtualProtect
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LocalAlloc
InterlockedExchange
HeapDestroy

user32

GetClientRect
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
GetWindowTextA
UnregisterClassA
SetWindowsHookExA
DispatchMessageA
GetKeyState
PostQuitMessage
ValidateRect
LoadCursorA
GetSystemMetrics
GetDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ExitWindowsEx
EndDeferWindowPos
DefWindowProcA
GetClipboardData
SetClipboardData
SetForegroundWindow
GetClassInfoExA
GetIconInfo
SendMessageTimeoutA
SendMessageA
IsDialogMessageA
ReleaseDC
LoadBitmapA
GetWindowLongA
MessageBoxA
CallNextHookEx
EnumWindows
CheckDlgButton
SetWindowTextA
SendDlgItemMessageA
InflateRect
CheckRadioButton
DestroyWindow
DrawTextA
IntersectRect
SetParent
GrayStringA
DrawTextExA
TabbedTextOutA
DestroyMenu
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
PeekMessageA
CopyRect

gdi32

ScaleWindowExtEx
ExtTextOutA
SaveDC
RestoreDC
SetMapMode
SetBkColor
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
SetWindowExtEx
DeleteDC
GetStockObject
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
EndDoc
ScaleViewportExtEx
CombineRgn
AbortDoc
SetViewportExtEx
SetAbortProc
SetRectRgn
GetDeviceCaps
OffsetViewportOrgEx

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

oleaut32

VariantChangeType
VariantClear
VariantInit

ws2_32

WSACleanup
WSAGetOverlappedResult
WSASocketA
WSACloseEvent
WSAStartup
WSAConnect
WSACreateEvent
WSAAddressToStringA

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a78c925959f3ebbaf584f2ba636ddd2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

oleaut32

ws2_32

oleacc

Sections

.text Size: 253KB - Virtual size: 252KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 72KB - Virtual size: 348KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 253KB - Virtual size: 252KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 72KB - Virtual size: 348KB

.rsrc
Size: 1KB - Virtual size: 1KB