26830e0e5684894b0f59e2b09569a4d6ceb41abc8918402746a8049c9cce17ee

Sharing

Copy URL

Twitter E-mail

General

Target

26830e0e5684894b0f59e2b09569a4d6ceb41abc8918402746a8049c9cce17ee
Size

125KB
MD5

a2c063dee16f37f160cad9501977e08a
SHA1

b9810e9410e9a741549a9245d4528d74daaa3b5d
SHA256

26830e0e5684894b0f59e2b09569a4d6ceb41abc8918402746a8049c9cce17ee
SHA512

6efa9c563f084a869de82988c9e29fc47ec10b0360f4031efe24d0aa436f7796a96dc4e7101de6dfd65f0a1e58007eea8826dc97125f1c9620699e7911507b44
SSDEEP

3072:Bryb4N8PblrcW8uSP340C/oTU5osNtlaOt6sYNggzRCx1yIFe5SaX9q/NufWSu:xO4NUblrcW8uSP3zC/oY5oWtmReAa1J/

Score

N/A

Malware Config

Signatures

Files

26830e0e5684894b0f59e2b09569a4d6ceb41abc8918402746a8049c9cce17ee
.exe windows x86

2d1d9cae654646f1812eea29273c0789

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
LookupPrivilegeValueW
CreateWellKnownSid
IsValidSid
CopySid
GetLengthSid
GetTokenInformation
EqualSid
AddAce
GetAce
AddAccessAllowedAce
InitializeAcl
GetAclInformation
OpenProcessToken
SetTokenInformation
GetSecurityDescriptorDacl
GetKernelObjectSecurity
CreateProcessAsUserW
CreateRestrictedToken
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW

kernel32

FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
WriteFile
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
DuplicateHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
LCMapStringA
LCMapStringW
HeapReAlloc
GetTimeZoneInformation
GetLocaleInfoA
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
SetEnvironmentVariableA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WritePrivateProfileStringW
lstrlenA
GetModuleHandleA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FormatMessageW
LocalFree
MulDiv
GlobalFlags
GetTickCount
GlobalFree
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
InterlockedDecrement
GlobalAlloc
InterlockedIncrement
FileTimeToSystemTime
GetThreadLocale
FreeResource
GetCurrentThreadId
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
MultiByteToWideChar
GetVersionExA
lstrlenW
GlobalLock
GlobalUnlock
GetCurrentProcessId
GlobalGetAtomNameW
GlobalAddAtomW
SetLastError
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetStartupInfoW
GetModuleFileNameW
GetCurrentProcess
GetCommandLineW
IsDebuggerPresent
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
GetModuleHandleW
CreateFileW
GetFileSize
ReadFile
CloseHandle
SetFilePointer
GetStdHandle
GetLastError
SetEnvironmentVariableW
RemoveDirectoryW

gdi32

GetTextColor
GetBkColor
GetMapMode
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
DeleteObject
GetRgnBox
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32W
ExtTextOutW
BitBlt
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateRoundRectRgn
CreateRectRgn

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

shlwapi

PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathCombineW
PathIsUNCW

ole32

OleInitialize
OleUninitialize
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoUninitialize
CoInitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries

comdlg32

GetFileTitleW

oleaut32

SysAllocStringLen
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysFreeString
SysAllocString
OleCreateFontIndirect
VariantClear

oledlg

OleUIBusyW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d1d9cae654646f1812eea29273c0789

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

winspool.drv

shlwapi

ole32

comdlg32

oleaut32

oledlg

version

Sections

.text Size: 96KB - Virtual size: 96KB

.bss Size: - Virtual size: 136KB

.pdata Size: 4KB - Virtual size: 4KB

.idata Size: 7KB - Virtual size: 6KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 96KB - Virtual size: 96KB

.bss
Size: - Virtual size: 136KB

.pdata
Size: 4KB - Virtual size: 4KB

.idata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 16KB - Virtual size: 16KB