df9cd563ddb299b1d6bccfbff9303caffbcfa1997e3d524676473ee9c58e2922

Sharing

Copy URL Twitter E-mail

General

Target

df9cd563ddb299b1d6bccfbff9303caffbcfa1997e3d524676473ee9c58e2922
Size

156KB
MD5

0abb590657caa81277ba48a2916f8dc8
SHA1

04c43ab63c61d825dd55220aa4b9cc8185356e09
SHA256

df9cd563ddb299b1d6bccfbff9303caffbcfa1997e3d524676473ee9c58e2922
SHA512

cd101d55f493ec03552f6c2a8e3349bc82d60f4e90f2278da258fdbb7efb734ca6ae1d15b6d219cd6e8a101c3db080d06b82e8b26197b00038fbef849bda5ab9
SSDEEP

3072:g1Yx/dHH94cPgbt8b55uJxOSRxXoZRlO9J/uyvKOs:gOHd4cPgbYsxdRx2atC9

Score

N/A

Malware Config

Signatures

Files

df9cd563ddb299b1d6bccfbff9303caffbcfa1997e3d524676473ee9c58e2922
.exe windows x86

0ccd597d638994cc41de74d7a3335979

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

CloseDriver
SendDriverMessage
OpenDriver

kernel32

FindFirstFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
FindNextFileA
GetStartupInfoA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineA
SetEndOfFile
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
MoveFileExA
DeleteFileA
SetFileAttributesA
Sleep
CreateProcessA
lstrcatA
GetWindowsDirectoryA
GetVersionExA
CloseHandle
GetLastError
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
SetLastError
WideCharToMultiByte
lstrcmpA
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
SetHandleCount
GetStdHandle
GetFileType

user32

CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
ShowWindow
LoadStringA
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
wsprintfA
GetTopWindow
GetMenu
ExitWindowsEx
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
FindWindowExA
SendMessageA
CreateDialogIndirectParamA
IsWindow
UnregisterClassA

gdi32

SetTextColor
GetClipBox
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegDeleteValueA
OpenProcessToken
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegEnumValueA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegCreateKeyExA

comctl32

ord17

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0ccd597d638994cc41de74d7a3335979

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 80KB - Virtual size: 77KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 36KB - Virtual size: 36KB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 36KB - Virtual size: 36KB