11d188acc1a4321f25ef4fc24665ea064c82d2a79915c0ff756c2b72bc1e3987

Sharing

Copy URL Twitter E-mail

General

Target

11d188acc1a4321f25ef4fc24665ea064c82d2a79915c0ff756c2b72bc1e3987
Size

361KB
MD5

92f54d53090dd4c92d942aec7225955c
SHA1

188a30cd472c1db7d37e6378acb0d23149d5ce57
SHA256

11d188acc1a4321f25ef4fc24665ea064c82d2a79915c0ff756c2b72bc1e3987
SHA512

d493718f3c2c54d745f3687957e48d1ef8e5923e511a3b00d69aafbd1f06c8109ae0a451f6a19a5cf5365eb64644620075fab57658c3311a262863d7f653f295
SSDEEP

3072:RL0ZcztoSikw4fOj46KMEu1zHwCIsbORbpmTrzBy+7CcshA+5VKcr5ShRJfQfH1T:9mSikQUu5QnjRbpRc21m5fwDVMC5Pc2x

Score

N/A

Malware Config

Signatures

Files

11d188acc1a4321f25ef4fc24665ea064c82d2a79915c0ff756c2b72bc1e3987
.exe windows x86

797591258cfb5176d18151c7c454b2e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM

Imports

kernel32

GetModuleFileNameA
GetLastError
SetLastError
HeapReAlloc
LoadLibraryW
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
Sleep
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
lstrcpynA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
WriteFile
GetProcAddress
GetCurrentThreadId
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
LoadLibraryExA
lstrcmpiA
lstrcpyA
FindResourceA
LoadResource
LockResource
FreeResource
SizeofResource
GetUserDefaultLangID
FindResourceExW
lstrcpyW
GetCurrentDirectoryW
lstrcatW
HeapCreate
GetProcessHeap
HeapAlloc
SetErrorMode
GetVolumeInformationA
GetOEMCP
GetACP
LoadLibraryA
FreeLibrary
GetVersion
ExitProcess
CreateFileA
ReadFile
InterlockedDecrement
InterlockedIncrement
GetCPInfo
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
SetHandleCount
GetStartupInfoW
HeapSetInformation
GetCommandLineA
WideCharToMultiByte
HeapFree
RaiseException

user32

TranslateMessage
DispatchMessageA
GetMessageA
UnregisterClassA
ShowWindow
CreateWindowExA
RegisterClassExA
GetSysColorBrush
LoadCursorA
DefWindowProcA
InvalidateRect
GetDC
SetWindowLongA
UpdateWindow
DestroyWindow
DialogBoxParamA
GetLastInputInfo
GetDlgItem
SendMessageA
GetWindowDC
ReleaseDC
PostThreadMessageA
LookupIconIdFromDirectory
CreateIconFromResource
GetClientRect
BeginPaint
DrawTextA
EndPaint
LoadIconA
EndDialog
SetDlgItemTextW
SendDlgItemMessageA
BeginDeferWindowPos
EndDeferWindowPos
EnableWindow
PostMessageA
GetSysColor
LoadStringA

gdi32

CreateFontA
CreateRectRgn
CreatePen
SelectObject
Pie
DeleteObject
SaveDC
MoveToEx
LineTo
RestoreDC
SetTextColor
GetStockObject
GetObjectA
CreateFontIndirectA
Polyline
CreateDCA
EnumFontsA

winspool.drv

EnumPrintersA

comdlg32

GetOpenFileNameA

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegCloseKey

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

ole32

CoInitializeEx
CoTaskMemFree
CoGetInterfaceAndReleaseStream
MkParseDisplayName
CreateBindCtx
CoInitialize
CoUninitialize
StringFromCLSID

iphlpapi

GetAdaptersInfo

shlwapi

StrToIntExA
PathFindFileNameA
StrRChrA

pdh

PdhCollectQueryData
PdhOpenQueryA
PdhAddCounterW

msi

ord40

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flash
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

797591258cfb5176d18151c7c454b2e7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

iphlpapi

shlwapi

pdh

msi

Sections

.text Size: 42KB - Virtual size: 41KB

.rdata Size: 57KB - Virtual size: 57KB

.data Size: 3KB - Virtual size: 6KB

.flash Size: 166KB - Virtual size: 166KB

.rsrc Size: 91KB - Virtual size: 91KB

.text
Size: 42KB - Virtual size: 41KB

.rdata
Size: 57KB - Virtual size: 57KB

.data
Size: 3KB - Virtual size: 6KB

.flash
Size: 166KB - Virtual size: 166KB

.rsrc
Size: 91KB - Virtual size: 91KB