5e95aa0544decfa93c9d33de241a94fee673066e21ff66f5fa90423960f47188

Sharing

Copy URL Twitter E-mail

General

Target

5e95aa0544decfa93c9d33de241a94fee673066e21ff66f5fa90423960f47188
Size

335KB
MD5

3dfe1571c3dc5899675f876c5a245b97
SHA1

d283bb8347127de615b393aba13ba8b0f6a97f1d
SHA256

5e95aa0544decfa93c9d33de241a94fee673066e21ff66f5fa90423960f47188
SHA512

76215aff1a68299a4942eb54691209b505ff8e960f673411e0a9eaae334a67c73c2c98c03a01908cafab5bd6639938884bf7f24e7c66307d4914ad0b6a2cba37
SSDEEP

6144:l5ds896Llp/f6jYsV9Cn3o9SjZJV1CQUCmWikyv0JlE+boCiwSKEz:dwlFSYsW3o9O0CmWikDqIoOu

Score

N/A

Malware Config

Signatures

Files

5e95aa0544decfa93c9d33de241a94fee673066e21ff66f5fa90423960f47188
.exe windows x86

3315c861be40184463129d2090500419

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CreateMutexA
GetLongPathNameA
ResetEvent
GetPrivateProfileStructW
GlobalFindAtomW
CommConfigDialogW
FindNextChangeNotification
GetPrivateProfileSectionNamesW
WritePrivateProfileSectionW
BackupSeek
EnumDateFormatsExW
ReadFileScatter
LocalHandle
WritePrivateProfileStructW
GlobalFindAtomW
CreatePipe
GetMailslotInfo
SetTapeParameters
CreateHardLinkW
DebugBreak
IsBadStringPtrW
EscapeCommFunction
lstrcpyA
TlsGetValue
CancelWaitableTimer
ExpandEnvironmentStringsA
GetLocaleInfoA
ResetWriteWatch
_llseek
GetComputerNameW
SetProcessWorkingSetSize
LocalFree
EnumDateFormatsA
RtlZeroMemory
FreeLibrary
GetShortPathNameW
GetCPInfo
GlobalFindAtomW
GlobalFindAtomW
DefineDosDeviceA
CloseHandle
GetCommMask
EnumLanguageGroupLocalesW
OpenProcess
WriteProfileSectionA

psapi

EnumDeviceDrivers
GetProcessMemoryInfo
EmptyWorkingSet

user32

DdeCreateDataHandle
CheckMenuItem
MonitorFromWindow
MsgWaitForMultipleObjects
SystemParametersInfoW
SetDlgItemInt
GetSystemMenu
TileWindows
DispatchMessageW
SubtractRect
CreateDesktopW
GetClassLongW
SendNotifyMessageA
GetMessageA
SendIMEMessageExA
FindWindowExW
GetTopWindow
DdeCreateStringHandleA
CharUpperBuffW
SendMessageTimeoutW
MapVirtualKeyExW
DeferWindowPos
SendMessageCallbackW
DestroyAcceleratorTable
GetClassInfoA
IsWindowEnabled
SetWindowPos
GetUserObjectSecurity
MessageBoxIndirectW
GetWindowTextA
RegisterShellHookWindow
CheckRadioButton
UpdateLayeredWindow
ToAsciiEx
SetScrollRange
DestroyCursor
ScrollDC
DdeKeepStringHandle
CreateIconIndirect
ToUnicodeEx
MapVirtualKeyA
GetMonitorInfoA
GetComboBoxInfo
GetWindowInfo
RegisterHotKey
SetClipboardData
DestroyMenu
GetSysColorBrush
CharUpperBuffA
EnumClipboardFormats
CascadeChildWindows
SendIMEMessageExW
TabbedTextOutW
LockWorkStation
LockSetForegroundWindow
GetDlgCtrlID
ShowScrollBar
MonitorFromPoint
DrawAnimatedRects
GetClientRect
DlgDirListW
CharToOemA
OpenClipboard
CharUpperW
IsWindowVisible
DialogBoxParamA
SetCaretBlinkTime
ToUnicode
WinHelpA
CreateAcceleratorTableW
GetMonitorInfoW
GetClassInfoW
DdeCreateStringHandleW
SetActiveWindow
GetNextDlgTabItem
GetMessageW
UserHandleGrantAccess
GetWindowRgn
GetCursorPos
GetWindowTextW
GetClassNameW
GetInputDesktop
GetCursorInfo
SetScrollInfo
SetWindowLongA
DialogBoxIndirectParamA
GetSystemMetrics
SendMessageA
LookupIconIdFromDirectoryEx

winspool.drv

AddPrinterDriverExA
AddFormA

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3315c861be40184463129d2090500419

Headers

File Characteristics

Imports

kernel32

psapi

user32

winspool.drv

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 4KB - Virtual size: 3KB

.xdata Size: 512B - Virtual size: 294B

.data Size: 68KB - Virtual size: 132KB

.rsrc Size: 115KB - Virtual size: 188KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 4KB - Virtual size: 3KB

.xdata
Size: 512B - Virtual size: 294B

.data
Size: 68KB - Virtual size: 132KB

.rsrc
Size: 115KB - Virtual size: 188KB