479c349598e72fe3d25931eb7f47df5c5853e963c415ac1b135b65a48bfa5389

Sharing

Copy URL Twitter E-mail

General

Target

479c349598e72fe3d25931eb7f47df5c5853e963c415ac1b135b65a48bfa5389
Size

1.3MB
MD5

a0c5e15d9b1a03eec00efdb4bf640f83
SHA1

7886320623231bffb9e8dc0b9e68eccac1dee657
SHA256

479c349598e72fe3d25931eb7f47df5c5853e963c415ac1b135b65a48bfa5389
SHA512

626c16c7d849c807a82b3ac4afef8fd4ee97af9781246c4f756237aead0331ac2b96bdbb7d6ed7835a0da124b0af400e80cf6a174240f917aa4ab2fb6907634d
SSDEEP

12288:yecicgqJKf0tPhYtl1vv10vGdr8haELOgkpSDNWJyc16P5YUk/ohQWUGcIkGeAZW:RcicgqIMirs48h1LOyDi1A2ohQQj1j

Score

N/A

Malware Config

Signatures

Files

479c349598e72fe3d25931eb7f47df5c5853e963c415ac1b135b65a48bfa5389
.exe windows x86

45627d8e809c739b270a602ea37369a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
GetFileAttributesA
GetFileSize
GetFileTime
RtlUnwind
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
GetCommandLineA
ExitThread
CreateThread
HeapReAlloc
HeapSize
GetACP
GetTimeFormatA
GetDateFormatA
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
SetEndOfFile
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetProcessHeap
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
UnlockFile
LockFile
SetFilePointer
GetProfileStringA
DuplicateHandle
SetErrorMode
GetThreadLocale
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GlobalFlags
lstrcpynA
MulDiv
SuspendThread
SetThreadPriority
ResumeThread
GlobalAlloc
lstrcmpA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
RaiseException
InterlockedExchange
LocalAlloc
FlushFileBuffers
SetEvent
GetDriveTypeA
lstrcmpiA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
CreateProcessA
DeleteFileA
SetLastError
GetCurrentThreadId
GetCurrentProcess
GetVersionExA
lstrcpyA
lstrcatA
ReadFile
WriteFile
SetFileAttributesA
CopyFileA
FindClose
FormatMessageA
GetLogicalDrives
GetVolumeInformationA
DeviceIoControl
CreateFileA
CloseHandle
FreeLibrary
ResetEvent
WaitForSingleObject
LoadLibraryA
GetLastError
GetProcAddress
CreateEventA
Sleep
FindFirstFileA
QueryDosDeviceA
OutputDebugStringA
GetWindowsDirectoryA
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
VirtualAlloc
SizeofResource

user32

GrayStringA
InflateRect
LoadCursorA
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DrawTextA
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
SetWindowContextHelpId
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
DestroyMenu
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
CopyRect
GetSysColor
GetCursorPos
ScreenToClient
PtInRect
GetFocus
GetParent
SetFocus
InvalidateRect
GetClassNameA
UpdateWindow
GetDesktopWindow
EnumWindows
KillTimer
SetTimer
GetSystemMetrics
GetClientRect
DrawIcon
LoadStringA
SendMessageA
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetKeyState
ClientToScreen
GetSystemMenu
AppendMenuA
LoadIconA
FindWindowA
SetForegroundWindow
IsIconic
ShowWindow
MessageBeep
IsCharAlphaA
IsCharAlphaNumericA
DefDlgProcA
IsWindowUnicode
wsprintfA
GetMessageA
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
GetDC
ReleaseDC
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
PostMessageA
SendDlgItemMessageA
GetNextDlgTabItem
MapDialogRect
PeekMessageA
DispatchMessageA
GetPropA
AdjustWindowRectEx
MapWindowPoints

gdi32

RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SaveDC
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
DeleteDC
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
DeleteObject
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetTextExtentPoint32A

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comctl32

ImageList_Destroy
ord17
ImageList_GetImageInfo
ImageList_Draw

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize

olepro32

ord253

oleaut32

VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantClear

Sections

.text
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 904KB - Virtual size: 924KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

45627d8e809c739b270a602ea37369a5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 312KB - Virtual size: 309KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 20KB - Virtual size: 45KB

.rsrc Size: 904KB - Virtual size: 924KB

.text
Size: 312KB - Virtual size: 309KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 20KB - Virtual size: 45KB

.rsrc
Size: 904KB - Virtual size: 924KB