26741c57d821013f4ff36638135bbb2f5aa47b9ee41727532bb3d310f310c680

Sharing

Copy URL Twitter E-mail

General

Target

26741c57d821013f4ff36638135bbb2f5aa47b9ee41727532bb3d310f310c680
Size

232KB
MD5

8373c18a73be0163676b818bef414430
SHA1

4fdb837bf09db5b606a942d74942990abcc987c9
SHA256

26741c57d821013f4ff36638135bbb2f5aa47b9ee41727532bb3d310f310c680
SHA512

843f883b6ed260210af4d096b784c3506893b8a8f94331aa657b6d25a5c919ade36fdbad751667a141e8941005fef39020e0929de8d9454572c8023b45172c66
SSDEEP

3072:avwj4Y9bLrDqC1WwMy6QmSg0blsWQG2PXXDSt4tMBJsyt3dSnyHheHo:avGrLr+yWwvZmStZ6XOtTBJsLnyH

Score

N/A

Malware Config

Signatures

Files

26741c57d821013f4ff36638135bbb2f5aa47b9ee41727532bb3d310f310c680
.exe windows x86

c81f4df35a867f82c4a58bd1b755d2ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetProcAddress
LoadLibraryA
CreateThread
FreeLibrary
ExitProcess
WinExec
lstrcatA
ReleaseMutex
OpenMutexA
lstrlenA
lstrcpynA
CreateFileA
CloseHandle
MoveFileExA
GetTempPathA
WriteFile
LoadResource
FindResourceA
EnumResourceNamesA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GlobalFree
ReadFile
GlobalAlloc
GetFileSize
GetFileAttributesA
lstrcpyA
WaitForSingleObject
CreateMutexA
CopyFileA
GetSystemDirectoryA
GetTickCount
GetComputerNameA
GetLocaleInfoW
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalLock
GetModuleFileNameA
ResumeThread
LockResource
GlobalUnlock
GetModuleHandleA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
SetLastError
MulDiv
InterlockedDecrement
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
WritePrivateProfileStringA
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetThreadLocale
GetCPInfo
GetOEMCP
SetErrorMode
DuplicateHandle
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageA
RtlUnwind
GetStartupInfoA
GetCommandLineA
TerminateProcess
HeapFree
ExitThread
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualProtectEx
InterlockedExchange
GetProcessVersion
Sleep
CreateProcessA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
WriteProcessMemory
SetThreadContext
VirtualAllocEx

user32

SetCursor
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
IsWindow
SetActiveWindow
EndDialog
SetWindowContextHelpId
GetWindow
SetWindowPos
MapDialogRect
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
OffsetRect
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CreateWindowExA
GetDlgCtrlID
GetWindowTextA
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
DestroyMenu
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
PostQuitMessage
PostMessageA
LoadIconA
GetClientRect
IsIconic
SendMessageA
DrawIcon
GetSystemMetrics
SetWindowLongA
GetDesktopWindow
wsprintfA
EnableWindow
UnregisterClassA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comctl32

ord17

oledlg

ord8

olepro32

ord253

userenv

CreateEnvironmentBlock

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c81f4df35a867f82c4a58bd1b755d2ae

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

winspool.drv

comctl32

oledlg

olepro32

userenv

Sections

.text Size: 152KB - Virtual size: 150KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 24KB - Virtual size: 35KB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 152KB - Virtual size: 150KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 24KB - Virtual size: 35KB

.rsrc
Size: 12KB - Virtual size: 8KB