b6261523e30502f8a96050efebf940502f905a9248a423c29add5fb9b1eccd97

Sharing

Copy URL Twitter E-mail

General

Target

b6261523e30502f8a96050efebf940502f905a9248a423c29add5fb9b1eccd97
Size

920KB
MD5

5ff7185303167af374288e6ba3d34150
SHA1

10a50b0d9dc36302aba444c0a5fa5ec07545606c
SHA256

b6261523e30502f8a96050efebf940502f905a9248a423c29add5fb9b1eccd97
SHA512

d98eacdb41d09fbb6ce9267ce0d5ddd48e988390af8c0039da0588aabfe9829fe6c688e532564abbabd14423b2c38f1d08f198a49795d6cc5865c5195f885a42
SSDEEP

24576:lQRvNENgL3cxDgUEesiHYo5OrP5+KtK930UZAPg:sEjVgUEesiHYo5OrP5+KtK930UZ

Score

N/A

Malware Config

Signatures

Files

b6261523e30502f8a96050efebf940502f905a9248a423c29add5fb9b1eccd97
.exe windows x86

9d0345959cc92726e2779bac25a80d5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerSetControlDetails
mixerGetNumDevs
mixerGetLineInfoA
mixerGetDevCapsA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerClose
mixerOpen

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailA

powrprof

SetActivePwrScheme
SetSuspendState
GetActivePwrScheme
ReadGlobalPwrPolicy

kernel32

WriteFile
SetFilePointer
FlushFileBuffers
GetOEMCP
MulDiv
CloseHandle
SetStdHandle
GlobalFlags
GetCPInfo
GetProcessVersion
GlobalGetAtomNameA
lstrcatA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GetCurrentThreadId
WideCharToMultiByte
GetModuleFileNameA
MultiByteToWideChar
TlsGetValue
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalLock
GlobalFree
GlobalHandle
GlobalUnlock
LocalAlloc
TlsAlloc
LocalFree
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetLastError
InitializeCriticalSection
lstrcpynA
SetSystemPowerState
lstrcmpA
lstrcmpiA
lstrcpyA
GetVersionExA
GetCurrentProcess
GetSystemPowerStatus
lstrlenA
FreeLibrary
SetProcessShutdownParameters
LoadLibraryA
GetProcAddress
ReleaseMutex
OpenMutexA
CreateMutexA
WaitForSingleObject
GetVersion
CreateEventA
GetTickCount
SetEvent
TerminateThread
ResumeThread
SuspendThread
DeviceIoControl
CreateThread
GetLastError
GetEnvironmentStringsW
GetStdHandle
CreateFileA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
TerminateProcess
HeapReAlloc
HeapSize
GetACP
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapAlloc
HeapFree
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
IsBadReadPtr

user32

SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetForegroundWindow
GetWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
LoadStringA
GetParent
GetLastActivePopup
IsWindowEnabled
SendMessageA
EnableWindow
UnhookWindowsHookEx
GetSystemMetrics
GetWindowRect
SendDlgItemMessageA
GrayStringA
MessageBeep
BeginPaint
EndPaint
wsprintfA
PostQuitMessage
CreateWindowExA
UpdateWindow
LoadCursorA
RegisterClassA
FindWindowA
GetMessageA
TranslateMessage
DispatchMessageA
LoadMenuA
GetSubMenu
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
TrackPopupMenu
DestroyMenu
LoadIconA
MessageBoxA
IsWindow
PostMessageA
SetDlgItemTextA
DestroyWindow
GetWindowLongA
CreateDialogParamA
PtInRect
GetClassNameA
GetSysColorBrush
SetWindowTextA
DialogBoxParamA
SetTimer
KillTimer
EndDialog
SetWindowPos
SetWindowLongA
SetLayeredWindowAttributes
GetDlgItem
MoveWindow
ShowWindow
DrawTextA
TabbedTextOutA
DefWindowProcA
ClientToScreen
GetDoubleClickTime
IsWindowVisible
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetWindowTextA
GetDlgCtrlID
GetClassLongA
GetDC
ReleaseDC
GetMessagePos
GetMessageTime
GetMenuItemID

gdi32

GetStockObject
DeleteObject
TextOutA
SetBkMode
SelectObject
CreateFontIndirectA
GetTextMetricsA
DeleteDC
GetDeviceCaps
GetObjectA
GetClipBox
CreateBitmap
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
ScaleWindowExtEx
PtVisible
RectVisible
Escape
ExtTextOutA
SetBkColor
SetTextColor
GetTextColor

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

DeregisterEventSource
ReportEventA
RegisterEventSourceA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
RegCloseKey
RegQueryValueExA
AdjustTokenPrivileges
RegDeleteValueA
LookupPrivilegeValueA
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
Shell_NotifyIconA

comctl32

ord17

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 716KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�I$?�
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d0345959cc92726e2779bac25a80d5b

Headers

File Characteristics

Imports

winmm

setupapi

powrprof

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 16KB - Virtual size: 33KB

.rsrc Size: 716KB - Virtual size: 713KB

�I$?� Size: 88KB - Virtual size: 88KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 16KB - Virtual size: 33KB

.rsrc
Size: 716KB - Virtual size: 713KB

�I$?�
Size: 88KB - Virtual size: 88KB