0ec3ce569c8564c0d15ca3d926697049ecbdbd5b35b291c785b99b3b92d6eb2d

Sharing

Copy URL Twitter E-mail

General

Target

0ec3ce569c8564c0d15ca3d926697049ecbdbd5b35b291c785b99b3b92d6eb2d
Size

372KB
MD5

0c1a5244f30dae91ca82878f6b21e216
SHA1

3513bad408aa6b735c1fc19865f39d64f8a5d44f
SHA256

0ec3ce569c8564c0d15ca3d926697049ecbdbd5b35b291c785b99b3b92d6eb2d
SHA512

18a003044c07c408e95f2803ae8c0a3102d13df386ece6878c94a98eb974d3cb8db4ec3b74869be56f983e4983fdd09c2ebd9813586489d266348a45153a5845
SSDEEP

6144:vKXET79eCkPzA5MrpVOlVDZPO9TxOyVLBK3q6gyD:7T79eCkPzA5MfCBZW8yVQPgy

Score

N/A

Malware Config

Signatures

Files

0ec3ce569c8564c0d15ca3d926697049ecbdbd5b35b291c785b99b3b92d6eb2d
.exe windows x86

f3a5607ffc79c0c131f16c64b7dd2c12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
WritePrivateProfileStringA
GetProcessVersion
SizeofResource
RtlUnwind
GetStartupInfoA
ExitProcess
HeapAlloc
HeapFree
FileTimeToSystemTime
FileTimeToLocalFileTime
RaiseException
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
GetStdHandle
LocalReAlloc
TlsGetValue
GlobalLock
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetUserDefaultLangID
GetProfileStringA
TlsFree
TlsSetValue
GlobalReAlloc
LocalAlloc
GlobalHandle
TlsAlloc
GlobalFlags
SetErrorMode
GetFileAttributesA
GetFileTime
GetFileSize
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalFree
InitializeCriticalSection
FindResourceA
GlobalFree
FreeLibrary
GetVersion
LoadResource
LockResource
GlobalAddAtomA
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
GetFileType
GlobalDeleteAtom
GetCommandLineA
GlobalAlloc
GetCurrentThreadId
lstrcmpA
GetCurrentThread
HeapDestroy
GlobalUnlock
SetLastError
MulDiv
GetModuleHandleA
GetModuleFileNameA
lstrcmpiA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
HeapCreate
VirtualFree
GetEnvironmentStringsW
SetHandleCount

user32

CopyRect
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
CreateDialogIndirectParamA
EndDialog
IsDialogMessageA
SetWindowTextA
ShowWindow
LoadStringA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
InvalidateRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
PostMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
CharUpperA
wsprintfA
LoadIconA
EnableWindow
GetClientRect
IsIconic
SendMessageA
DrawIcon
GetSystemMetrics
MessageBoxA
GetDlgItem
GetWindowTextLengthA
LoadBitmapA
GetMenuCheckMarkDimensions
SetWindowLongA
ExcludeUpdateRgn
ShowCaret
IsWindowUnicode
CharNextA
InflateRect
DefDlgProcA
DrawFocusRect
HideCaret
UnregisterClassA

gdi32

RestoreDC
SelectObject
GetStockObject
SetBkColor
SetBkMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
DeleteDC
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
CreateBitmap
Escape
GetObjectA
CreateCompatibleDC
GetTextExtentPointA
PatBlt
BitBlt
SaveDC
CreateDIBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA

comctl32

ord17

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3a5607ffc79c0c131f16c64b7dd2c12

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 36KB - Virtual size: 33KB

.tc Size: 196KB - Virtual size: 196KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 36KB - Virtual size: 33KB

.tc
Size: 196KB - Virtual size: 196KB