8ec86076a32876fe6d5c28ba4da532dead54be482fbf16508f903a8eb49a1314

Sharing

Copy URL Twitter E-mail

General

Target

8ec86076a32876fe6d5c28ba4da532dead54be482fbf16508f903a8eb49a1314
Size

225KB
MD5

c3993782ce160a0f9285269555cc9e59
SHA1

658bd30df6cd483433fcc54e95431ef6e70cb896
SHA256

8ec86076a32876fe6d5c28ba4da532dead54be482fbf16508f903a8eb49a1314
SHA512

2384c2f9c96008bffac4e59d54786d213380008a4fedb1cb1030a99ef0f7bd83966aed63524eca01553831daee808ad819c42779c023cae191f0fd12a70c3fbb
SSDEEP

6144:etXZwAjoYh4wSYUChSpqLX8vz8gpwHqLK:etpw/YDSY/hS0MogaSK

Score

N/A

Malware Config

Signatures

Files

8ec86076a32876fe6d5c28ba4da532dead54be482fbf16508f903a8eb49a1314
.exe windows x86

7561f9340f3804d6a9af4c4db4e4fc3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MapVirtualKeyExA
EnableWindow
IsWindow
FindWindowW
GetClassInfoA
IsRectEmpty
GetComboBoxInfo
MessageBoxIndirectA
GetSystemMetrics
InvertRect
IsWindowUnicode
IsDlgButtonChecked
TabbedTextOutA
GetDlgItem
GetKeyboardLayout

shell32

SHGetFileInfoA
ShellExecuteA
ShellExecuteExW

advapi32

RegQueryInfoKeyA
RegCloseKey

gdi32

GetDeviceCaps
CreateFontIndirectA
SelectObject
GetMapMode
SetTextColor
GetObjectA
MoveToEx
GetFontData
SetBkMode
CancelDC
SetWindowOrgEx
GetTextMetricsA
CloseFigure
GetCharABCWidthsFloatA
SetICMMode
GetWinMetaFileBits
BeginPath
DeleteObject
Rectangle
DPtoLP
GetLogColorSpaceW
GetTextAlign

winspool.drv

DocumentPropertiesW

kernel32

GetOEMCP
IsValidCodePage
CloseHandle
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetStartupInfoA
GetACP
GetCPInfo
LocalAlloc
PeekNamedPipe
DisconnectNamedPipe
SetFileApisToANSI
CreateFileA
SetPriorityClass
EndUpdateResourceW
GetEnvironmentStringsW
SetFileTime
GetPrivateProfileSectionW
lstrcpyA
LoadLibraryExA
SetHandleCount
GetCommandLineW
GetCurrentDirectoryA
GetTempFileNameW
VirtualAllocEx
SetThreadContext
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetLastError
HeapReAlloc
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetStdHandle
GetFileType
Sleep
GetModuleHandleW
GetProcAddress
ExitProcess
GetModuleHandleA
SetUnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
LoadLibraryA

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7561f9340f3804d6a9af4c4db4e4fc3b

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

advapi32

gdi32

winspool.drv

kernel32

Sections

.text Size: 120KB - Virtual size: 120KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 15KB - Virtual size: 65KB

.rsrc Size: 78KB - Virtual size: 78KB

.text
Size: 120KB - Virtual size: 120KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 15KB - Virtual size: 65KB

.rsrc
Size: 78KB - Virtual size: 78KB