11cf9377672c688ea0ac09792528b9e30baed74b1ae38490a00df7d6a6805c9a

Sharing

Copy URL Twitter E-mail

General

Target

11cf9377672c688ea0ac09792528b9e30baed74b1ae38490a00df7d6a6805c9a
Size

452KB
MD5

9284b32db75930244b3c0fe6435fa4c0
SHA1

c160777580402d0e2a2f0d65d0ce73a9572802eb
SHA256

11cf9377672c688ea0ac09792528b9e30baed74b1ae38490a00df7d6a6805c9a
SHA512

7fc3b69ebfa35db680c91478faef5d971bee92f03429703a19bf303f9629dad2f2d3f9ff7bb57cb73ffdd45b2e0896ae034915730bcbc9ec526defb0634cdd60
SSDEEP

6144:XQNm59eKwvD4dk2nFKXxBqjiWoX+hENl9xvJGlRsyYJ1Xtpp7A4b3:YmgvD4dk2nFWxEVxhE37BGrs5/b

Score

N/A

Malware Config

Signatures

Files

11cf9377672c688ea0ac09792528b9e30baed74b1ae38490a00df7d6a6805c9a
.exe windows x86

f9b4c9f3cf1888ae35034825ccfff207

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleInputA
SetConsoleMode
GetConsoleMode
SetLastError
InterlockedExchange
LoadLibraryA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetCurrentThreadId
FlushConsoleInputBuffer
GetStdHandle
GetCurrentProcessId
GlobalMemoryStatus
QueryPerformanceCounter
GetVersionExA
GetCurrentThread
GlobalDeleteAtom
WaitForSingleObject
CompareStringA
ResumeThread
SetThreadPriority
SuspendThread
InterlockedIncrement
InterlockedDecrement
lstrlenA
LocalFree
MulDiv
LoadResource
LockResource
GetVersion
EnterCriticalSection
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
FindClose
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
ExitProcess
RtlUnwind
HeapAlloc
HeapFree
RaiseException
CreateThread
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
SetConsoleCtrlHandler
TerminateProcess
HeapSize
SetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStartupInfoA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
LCMapStringA
IsBadReadPtr
IsBadCodePtr
CreateFileA
GetACP
GetOEMCP
SetEnvironmentVariableA
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetPrivateProfileIntA
Sleep
GetTickCount
GetFileSize
GetLocalTime
ExitThread
GetLastError
CloseHandle
SetEvent
GetCommandLineW

user32

GetDlgItem
DestroyWindow
GetSystemMetrics
IsWindow
SetActiveWindow
EndDialog
GetWindowPlacement
IsIconic
SetWindowPos
GetWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetDlgCtrlID
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
MapWindowPoints
SendDlgItemMessageA
GetMenuState
PtInRect
GetSysColorBrush
DestroyMenu
GetNextDlgTabItem
TranslateMessage
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
GetParent
GetLastActivePopup
IsWindowEnabled
SetCursor
PostQuitMessage
ShowWindow
SetForegroundWindow
LoadImageA
GetWindowRect
GetDesktopWindow
ClientToScreen
GetSysColor
GetMenuCheckMarkDimensions
SetWindowRgn
ScreenToClient
ReleaseDC
GetDC
SetRect
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
UpdateWindow
GetFocus

gdi32

CreateBitmap
SaveDC
RestoreDC
GetStockObject
SetBkColor
SetBkMode
GetDeviceCaps
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
Escape
RectVisible
PtVisible
SelectObject
CreateCompatibleDC
BitBlt
DeleteDC
DeleteObject
CombineRgn
ExtCreateRegion
CreateDIBSection

packdll

CalcCompressFile
ReleasePackBuf
DecompressFile

comctl32

ord17

wininet

InternetConnectW
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetSetOptionExW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
InternetGetLastResponseInfoW

advapi32

RegCloseKey

winspool.drv

ClosePrinter

Sections

.text
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9b4c9f3cf1888ae35034825ccfff207

Headers

File Characteristics

Imports

kernel32

user32

gdi32

packdll

comctl32

wininet

advapi32

winspool.drv

Sections

.text Size: 276KB - Virtual size: 276KB

.rdata Size: 56KB - Virtual size: 56KB

.data Size: 48KB - Virtual size: 71KB

.rsrc Size: 68KB - Virtual size: 68KB

.text
Size: 276KB - Virtual size: 276KB

.rdata
Size: 56KB - Virtual size: 56KB

.data
Size: 48KB - Virtual size: 71KB

.rsrc
Size: 68KB - Virtual size: 68KB