5990379a73480e190b36fb79f1bff8592443e0a3713f2a330d1773adafa17e32

Sharing

Copy URL Twitter E-mail

General

Target

5990379a73480e190b36fb79f1bff8592443e0a3713f2a330d1773adafa17e32
Size

262KB
MD5

84de11eeed6981c4313a1c1b77bd1515
SHA1

bba75c97ece663255ed194ffccc9ea2a2f9c2f39
SHA256

5990379a73480e190b36fb79f1bff8592443e0a3713f2a330d1773adafa17e32
SHA512

d4b9275e1fa5b740ec0133bedb348526d1130a9252e6c67f52fdb4e9c6ba9209b432685d26c7dcdd6af93f7dd972708b855a92e8d12fbfa215745eafd7d57877
SSDEEP

6144:+Y3es3cDttm3dTdgXKyq4JGLZcJkBPKNgdY/HiX3q:+Y3es3cDto3vGKyq46ZANMY/HEq

Score

N/A

Malware Config

Signatures

Files

5990379a73480e190b36fb79f1bff8592443e0a3713f2a330d1773adafa17e32
.exe windows x86

ec25e197851ff8c0ac9807bc6fa1ae65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList

kernel32

GetStartupInfoA
GetCommandLineA
RtlUnwind
TerminateProcess
HeapFree
ExitProcess
GetFileTime
HeapAlloc
RaiseException
GetTickCount
GetFileAttributesA
GetACP
GetFileSize
FreeEnvironmentStringsA
HeapSize
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SizeofResource
HeapReAlloc
GetTimeZoneInformation
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
GetLocaleInfoA
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindClose
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
GetOEMCP
DuplicateHandle
SetErrorMode
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCPInfo
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetWindowsDirectoryA
DeleteFileA
SetFileAttributesA
GetVersion
LoadLibraryA
GetProcAddress
FindFirstFileA
lstrcpynA
LocalAlloc
lstrlenA
GetLastError
FormatMessageA
LocalFree
SetLastError
GetThreadLocale
VirtualAlloc
WideCharToMultiByte
GetProfileStringA
GetProcessVersion
MultiByteToWideChar
WritePrivateProfileStringA
InterlockedIncrement
GlobalFlags
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
MulDiv
TlsAlloc
InitializeCriticalSection
lstrcatA
InterlockedDecrement
FreeLibrary
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalUnlock
lstrcpyA
GetModuleHandleA
FindResourceA
GlobalFree
LockResource
LoadResource
GetModuleFileNameA
CloseHandle
GlobalDeleteAtom
GlobalLock
GlobalAlloc
SetUnhandledExceptionFilter
lstrcmpA
LCMapStringA
UnhandledExceptionFilter
IsBadCodePtr

user32

InvalidateRect
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
PtInRect
GetClassNameA
GetDesktopWindow
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetRect
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetMenu
CopyAcceleratorTableA
CharNextA
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
DestroyMenu
MessageBeep
GetNextDlgGroupItem
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
wsprintfA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
MessageBoxA
LoadStringA
GetSysColorBrush
GetMenuItemCount
GetSubMenu
RegisterClassA
GetClassInfoA
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

SaveDC
RestoreDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
GetObjectA
DeleteObject
GetViewportExtEx
GetDeviceCaps
GetWindowExtEx
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
GetTextColor
GetBkColor
LPtoDP
GetMapMode
DPtoLP
PatBlt
CreateDIBitmap
CreateCompatibleDC
GetTextExtentPointA
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetMapMode
SetBkMode
BitBlt
GetStockObject
SelectObject
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegEnumKeyExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ec25e197851ff8c0ac9807bc6fa1ae65

Headers

File Characteristics

Imports

setupapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 151KB - Virtual size: 151KB

.rdata Size: 35KB - Virtual size: 35KB

.data Size: 18KB - Virtual size: 35KB

.rsrc Size: 56KB - Virtual size: 56KB

.text
Size: 151KB - Virtual size: 151KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 18KB - Virtual size: 35KB

.rsrc
Size: 56KB - Virtual size: 56KB