d5f731b9252e9564ffbfa25e34096f18b50411e3ceff9fe5c4f90216e721f152

Sharing

Copy URL Twitter E-mail

General

Target

d5f731b9252e9564ffbfa25e34096f18b50411e3ceff9fe5c4f90216e721f152
Size

220KB
MD5

124890d7e756c56e781323d7b0b4a404
SHA1

95473c083bcb0b7885501a079b1e6bdcbc08cec2
SHA256

d5f731b9252e9564ffbfa25e34096f18b50411e3ceff9fe5c4f90216e721f152
SHA512

4c34d65c4c2b888d366b50b70de1e23b48ef6495e2201511175515320185f2ab57cf626d519b715819d2acc30cd7b74b5d3c6076fd41a2c5a673beb0305217cb
SSDEEP

6144:9bJerlRGvnQqH242W2ih5R+Yn1N9aSb3Bs8+QoAAdV:Bi6v2GJ1N9aE9+BAAdV

Score

N/A

Malware Config

Signatures

Files

d5f731b9252e9564ffbfa25e34096f18b50411e3ceff9fe5c4f90216e721f152
.exe windows x86

86c6923e10415f12e48ade118994fc79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenProcessToken
RegDeleteKeyA
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegRestoreKeyA
RegOpenKeyExA
RegEnumValueA

kernel32

GetFileTime
GetCPInfo
GetStringTypeA
WideCharToMultiByte
UnlockFile
lstrcpynA
GlobalDeleteAtom
GetCurrentThread
GetLastError
WriteFile
GlobalAddAtomA
GlobalGetAtomNameA
HeapAlloc
FindFirstFileA
FindClose
CreateThread
LockResource
IsValidCodePage
lstrcmpiA
SetErrorMode
WritePrivateProfileStringA
SetHandleCount
GetModuleFileNameA
GlobalLock
GetFileAttributesA
FreeEnvironmentStringsA
lstrcatA
LocalAlloc
IsValidLocale
GetEnvironmentVariableA
GetFileType
TlsSetValue
TlsGetValue
SetEvent
MultiByteToWideChar
GlobalFlags
FreeLibrary
GetStdHandle
TlsAlloc
CloseHandle
FileTimeToSystemTime
GlobalUnlock
GlobalReAlloc
DeleteCriticalSection
GetShortPathNameA
FindResourceA
GetWindowsDirectoryA
GetFullPathNameA
WaitForSingleObject
SetConsoleCtrlHandler
LCMapStringW
GetModuleHandleA
GetUserDefaultLCID
EnumSystemLocalesA
SystemTimeToFileTime
RaiseException
LCMapStringA
GetProcessVersion
GetCurrentDirectoryA
LockFile
SetFilePointer
IsBadWritePtr
FlushFileBuffers
lstrcmpA
lstrlenA
CompareStringA
CompareStringW
FileTimeToLocalFileTime
GetCommandLineA
InterlockedDecrement
HeapDestroy
LocalFree
LocalReAlloc
SetEnvironmentVariableA
GetVolumeInformationA
GetPrivateProfileStringA
LeaveCriticalSection
DeleteFileA
MulDiv
HeapFree
FreeEnvironmentStringsW
FatalAppExitA
LoadLibraryW
GlobalHandle
GetLocaleInfoW
HeapCreate
lstrcpyA
IsBadReadPtr
GetEnvironmentStrings
EnterCriticalSection
CreateEventA
GetStringTypeW
ReadFile
GetFileSize
CreateFileA
GetStringTypeExA
GetVersionExA
DuplicateHandle
SetFileTime
GetCurrentProcessId
GlobalFree
GetThreadLocale
VirtualFree
GetStartupInfoA
GetLocalTime
GetTimeZoneInformation
GetPrivateProfileIntA
SetUnhandledExceptionFilter
SuspendThread
RtlUnwind
LocalFileTimeToFileTime
GlobalAlloc
LoadResource
HeapReAlloc
IsBadCodePtr
InterlockedIncrement
GetVersion
ResumeThread
SetFileAttributesA
SetLastError
SetThreadPriority
GetLocaleInfoA
GetSystemTime
HeapSize
GetCurrentProcess

setupapi

SetupDiBuildDriverInfoList
SetupCloseInfFile
SetupDiCreateDeviceInfoA
SetupDiGetDeviceInstallParamsA
SetupDiOpenDevRegKey
SetupDiSetDeviceInstallParamsA
SetupFindNextLine
SetupDiSetSelectedDriverA
SetupDiClassGuidsFromNameA
SetupFindFirstLineA
SetupOpenInfFileA
SetupDiEnumDriverInfoA
SetupGetStringFieldA
SetupDiSetDeviceRegistryPropertyA

user32

SetWindowLongA
GetWindowTextLengthA
DestroyWindow
GetMenuItemCount
DeferWindowPos
GetWindowTextA
RegisterWindowMessageA
SendDlgItemMessageA
SetWindowsHookExA
SetMenuItemBitmaps
GetScrollPos
GetDlgItem
PtInRect
GetScrollRange
BeginPaint
GetClassInfoA
ModifyMenuA
InsertMenuA
IsWindow
GetCursorPos
MoveWindow
GetForegroundWindow
SetWindowPlacement
OffsetRect
MapWindowPoints
UnhookWindowsHookEx
IsWindowVisible
GetMenuStringA
SetForegroundWindow
SendMessageA
BeginDeferWindowPos
SetFocus
LoadCursorA
GetClassNameA
SetActiveWindow
GetClientRect
EndPaint
IsWindowEnabled
DispatchMessageA
OemToCharA
GetClassLongA
GetPropA
GetDlgItemInt
GetWindowDC
PostQuitMessage
IsChild
SetWindowTextA
ScrollWindow
wsprintfA
GetSysColorBrush
CheckRadioButton
CallNextHookEx
DestroyMenu
SetPropA
GetFocus
CheckDlgButton
GetKeyState
GetNextDlgTabItem
GetDlgItemTextA
GetMenuState
GetCapture
LoadStringA
GetWindow
GetMessagePos
SetWindowPos
EndDeferWindowPos
SetScrollInfo
DefWindowProcA
CopyRect
CharUpperA
TabbedTextOutA
IsDialogMessageA
EnableMenuItem
ShowWindow
ClientToScreen
CheckMenuItem
ShowOwnedPopups
GetSubMenu
SetDlgItemTextA
RegisterClassA
SetScrollPos
GetWindowLongA
ReleaseDC
GetSystemMetrics
CreateWindowExA
GetMenuItemID
GetParent
MessageBoxA
GetDC
LoadIconA
DrawTextA
WinHelpA
CharToOemA
AdjustWindowRectEx
DeleteMenu
GrayStringA
SetCursor
IsIconic
CallWindowProcA
PeekMessageA
UpdateWindow
GetTopWindow
ShowScrollBar
RemovePropA
GetWindowPlacement
SystemParametersInfoA
TranslateMessage
EqualRect
GetMessageTime
EnableWindow
GetMessageA
ValidateRect
ScrollWindowEx
LoadBitmapA
GetScrollInfo
GetMenuCheckMarkDimensions
GetMenu
SetDlgItemInt
PostMessageA
SetScrollRange
GetDesktopWindow
TrackPopupMenu
GetWindowRect
GetActiveWindow
GetDlgCtrlID
ScreenToClient
IntersectRect
IsDlgButtonChecked

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

gdi32

SetColorAdjustment
TextOutA
ScaleWindowExtEx
OffsetViewportOrgEx
PlayMetaFileRecord
GetDeviceCaps
SelectClipRgn
MoveToEx
EnumMetaFile
SetWindowExtEx
CreatePen
DeleteObject
SetTextColor
CreateDIBPatternBrushPt
DeleteDC
SetViewportExtEx
IntersectClipRect
GetClipBox
GetCurrentPositionEx
CreatePatternBrush
OffsetWindowOrgEx
SelectObject
SetWindowOrgEx
CreateRectRgn
GetObjectType
GetDCOrgEx
PolyDraw
SetArcDirection
ExtCreatePen
SetBkColor
PtVisible
SetViewportOrgEx
ExtSelectClipRgn
SelectPalette
ExtTextOutA
LineTo
SetTextJustification
PolylineTo
CreateHatchBrush
SetMapperFlags
Escape
SelectClipPath
GetViewportExtEx
SetBkMode
CreateSolidBrush
OffsetClipRgn
StartDocA
SaveDC
PlayMetaFile
ArcTo
SetMapMode
SetTextCharacterExtra
SetStretchBltMode
SetTextAlign
RestoreDC
RectVisible
CreateBitmap
PolyBezierTo
ScaleViewportExtEx
SetPolyFillMode
GetStockObject
GetWindowExtEx
GetObjectA
ExcludeClipRect
GetClipRgn
SetROP2

shell32

DragAcceptFiles
SHGetFileInfoA

comdlg32

GetFileTitleA

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86c6923e10415f12e48ade118994fc79

Headers

File Characteristics

Imports

advapi32

kernel32

setupapi

user32

winspool.drv

gdi32

shell32

comdlg32

Sections

.text Size: 135KB - Virtual size: 135KB

.rdata Size: 52KB - Virtual size: 51KB

.rdata Size: 29KB - Virtual size: 28KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 135KB - Virtual size: 135KB

.rdata
Size: 52KB - Virtual size: 51KB

.rdata
Size: 29KB - Virtual size: 28KB

.rsrc
Size: 1KB - Virtual size: 1KB