74ddd3f3f05d11463d04b9eb0aeaa7f8145b5c5700f87bb33f56ba32bddc3ff5

Sharing

Copy URL Twitter E-mail

General

Target

74ddd3f3f05d11463d04b9eb0aeaa7f8145b5c5700f87bb33f56ba32bddc3ff5
Size

353KB
MD5

a3aba1d8f7a9eeaf3809c99c519bb69e
SHA1

c224442a163bfb5729793f31d9032bd8b38d9a5a
SHA256

74ddd3f3f05d11463d04b9eb0aeaa7f8145b5c5700f87bb33f56ba32bddc3ff5
SHA512

206cb04f10afc3374324f8bb88af81fa5a599cd51468a3e4d6fb0008dfc3d9d2fdf2d962a1a87262d81ee13b0983d8204ba5fdf3d3a464b1209a372537e58cf1
SSDEEP

6144:pm7W3e6ln5fKrxcLVWjn6+u8QD3VFoveKQC1GayMm0ZiXNaR+KmyBjPkanw9yUyR:SGf5fK1pno8QLjovDQClyMmUSNdKmGVc

Score

N/A

Malware Config

Signatures

Files

74ddd3f3f05d11463d04b9eb0aeaa7f8145b5c5700f87bb33f56ba32bddc3ff5
.exe windows x86

ecd74d16815fcdf1f5422d71ea6b2a13

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallNextHookEx
LoadImageA
DispatchMessageA
DefWindowProcA
ReleaseDC
GetWindowLongA
CheckMenuRadioItem
EnumWindows
GetClassNameA
GetClassInfoExA
RegisterHotKey
IsWindowEnabled
DrawIcon

winspool.drv

DocumentPropertiesA
DeletePrinterConnectionA
ClosePrinter
GetJobA
OpenPrinterA
EnumPrintersA
GetPrinterA

advapi32

OpenProcessToken
RegCloseKey
RegEnumKeyA
RegOpenKeyA
FreeSid
OpenSCManagerA
SetServiceStatus
AllocateAndInitializeSid
QueryServiceStatus
RegOpenKeyExA
RegCreateKeyExA
LookupPrivilegeValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteKeyA
RegQueryValueExA
RegisterServiceCtrlHandlerA
RegSetValueExA
GetTokenInformation
SetEntriesInAclA
OpenThreadToken
DeleteService
OpenServiceA
StartServiceCtrlDispatcherA

kernel32

GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetSystemInfo
GetProcAddress
OpenSemaphoreA
SetTapeParameters
VirtualFree
GetVolumeInformationA
CreateEventA
CreateDirectoryA
VirtualAlloc
ResetEvent
VirtualProtect
CloseHandle
FileTimeToLocalFileTime
GetVersion
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
HeapFree
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 159KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecd74d16815fcdf1f5422d71ea6b2a13

Headers

File Characteristics

Imports

user32

winspool.drv

advapi32

kernel32

Sections

.text Size: 175KB - Virtual size: 175KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 159KB - Virtual size: 445KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 175KB - Virtual size: 175KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 159KB - Virtual size: 445KB

.reloc
Size: 5KB - Virtual size: 5KB