31607149d76fa54847b1f4f493e0dada3c2692684dc7b2bdf8001c1ad25a885d

Sharing

Copy URL Twitter E-mail

General

Target

31607149d76fa54847b1f4f493e0dada3c2692684dc7b2bdf8001c1ad25a885d
Size

351KB
MD5

e20cd03c54c8168db68361f676039e84
SHA1

935d2907815903701eaf6cc19e97fc234f4986c7
SHA256

31607149d76fa54847b1f4f493e0dada3c2692684dc7b2bdf8001c1ad25a885d
SHA512

713065b4f5ab737108c65a6dafe62dc97ff288aa016a6bca8e80964f137a3fee609c50175018c534b8ceb7fc6f665d3d4ae2040f4ca7826ab96f2f155c2000be
SSDEEP

6144:WtXOwAjoYh4wSBrZrkDXdme6vl0Q4my3sn+aCpsM:Wtew/YDSBChA07m3vCpsM

Score

N/A

Malware Config

Signatures

Files

31607149d76fa54847b1f4f493e0dada3c2692684dc7b2bdf8001c1ad25a885d
.exe windows x86

7561f9340f3804d6a9af4c4db4e4fc3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MapVirtualKeyExA
EnableWindow
IsWindow
FindWindowW
GetClassInfoA
IsRectEmpty
GetComboBoxInfo
MessageBoxIndirectA
GetSystemMetrics
InvertRect
IsWindowUnicode
IsDlgButtonChecked
TabbedTextOutA
GetDlgItem
GetKeyboardLayout

shell32

SHGetFileInfoA
ShellExecuteA
ShellExecuteExW

advapi32

RegQueryInfoKeyA
RegCloseKey

gdi32

GetDeviceCaps
CreateFontIndirectA
SelectObject
GetMapMode
SetTextColor
GetObjectA
MoveToEx
GetFontData
SetBkMode
CancelDC
SetWindowOrgEx
GetTextMetricsA
CloseFigure
GetCharABCWidthsFloatA
SetICMMode
GetWinMetaFileBits
BeginPath
DeleteObject
Rectangle
DPtoLP
GetLogColorSpaceW
GetTextAlign

winspool.drv

DocumentPropertiesW

kernel32

GetOEMCP
IsValidCodePage
CloseHandle
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetStartupInfoA
GetACP
GetCPInfo
LocalAlloc
PeekNamedPipe
DisconnectNamedPipe
SetFileApisToANSI
CreateFileA
SetPriorityClass
EndUpdateResourceW
GetEnvironmentStringsW
SetFileTime
GetPrivateProfileSectionW
lstrcpyA
LoadLibraryExA
SetHandleCount
GetCommandLineW
GetCurrentDirectoryA
GetTempFileNameW
VirtualAllocEx
SetThreadContext
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetLastError
HeapReAlloc
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetStdHandle
GetFileType
Sleep
GetModuleHandleW
GetProcAddress
ExitProcess
GetModuleHandleA
SetUnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
LoadLibraryA

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7561f9340f3804d6a9af4c4db4e4fc3b

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

advapi32

gdi32

winspool.drv

kernel32

Sections

.text Size: 120KB - Virtual size: 120KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 15KB - Virtual size: 169KB

.rsrc Size: 204KB - Virtual size: 203KB

.text
Size: 120KB - Virtual size: 120KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 15KB - Virtual size: 169KB

.rsrc
Size: 204KB - Virtual size: 203KB