d660f7c56d6be59f8b94e2ca193476f181ef5eb18f7949ad35eb3da7a21ec201

Sharing

Copy URL

Twitter E-mail

General

Target

d660f7c56d6be59f8b94e2ca193476f181ef5eb18f7949ad35eb3da7a21ec201
Size

1.1MB
MD5

0573c1ea2ed27e0433bead71b284639e
SHA1

ec327f547fe092dd2089e11f61cb363f188a6932
SHA256

d660f7c56d6be59f8b94e2ca193476f181ef5eb18f7949ad35eb3da7a21ec201
SHA512

ffdebfb8ee39f67e1a36add9c304ec3950e3467fe21b8d2017ce0033efc0cef9f6662f4af7ced9f3d62d6184cd89519549aa1e158e4d845bf6d13d4d01df3094
SSDEEP

12288:wMXEWPos2+Xbdr/GtkyX/Ih2dGp5uUxRxEGZJYWSrzG2:wmoNkktkyPI9p5uUxRxzYS2

Score

N/A

Malware Config

Signatures

Files

d660f7c56d6be59f8b94e2ca193476f181ef5eb18f7949ad35eb3da7a21ec201
.exe windows x86

4de0be54161f8bb25625fa1216b95163

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAAsyncSelect
ntohs

winspool.drv

EnumPrintersW
ClosePrinter
AddPrinterW
OpenPrinterW
AddPrinterDriverExW
GetPrinterDriverDirectoryW
DocumentPropertiesW
XcvDataW
ord204
EnumPrinterDriversW

setupapi

SetupGetStringFieldW
SetupCloseInfFile
SetupFindFirstLineW
SetupGetLineCountW
SetupGetLineTextW
SetupOpenInfFileW
SetupFindNextLine

kernel32

InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GlobalGetAtomNameW
GetAtomNameW
FindResourceExW
lstrlenA
FileTimeToSystemTime
SystemTimeToFileTime
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentDirectoryW
SetErrorMode
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesW
GetFileAttributesW
GetFileTime
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
GlobalHandle
IsDebuggerPresent
RaiseException
ExitThread
CreateThread
ExitProcess
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapReAlloc
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FatalAppExitA
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
SetEnvironmentVariableA
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetVersionExW
CreateFileW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetThreadLocale
GetStringTypeExW
DeleteFileW
MoveFileW
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
InterlockedDecrement
GetCurrentProcessId
GetModuleHandleA
CopyFileW
GlobalSize
FormatMessageW
LocalFree
MulDiv
GlobalAlloc
VirtualProtect
lstrlenW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
WideCharToMultiByte
CreateDirectoryA
GetModuleFileNameA
GetUserDefaultUILanguage
GetWindowsDirectoryW
FindFirstFileW
FindNextFileW
FindClose
GetModuleFileNameW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetModuleHandleW
GetProcAddress
GetCurrentProcess
MultiByteToWideChar
HeapSetInformation
LoadLibraryW
GetLastError
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedCompareExchange
SetUnhandledExceptionFilter

user32

CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
TranslateAcceleratorW
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
LoadMenuW
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatW
GetSystemMenu
SetParent
UnionRect
PostThreadMessageW
SetTimer
KillTimer
GetDCEx
LockWindowUpdate
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
MapDialogRect
GetAsyncKeyState
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
UnregisterClassA
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
CharNextW
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextLengthW
GetKeyNameTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
DeleteMenu
CreateDialogIndirectParamW
DestroyWindow
UnregisterClassW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
GetSysColorBrush
GetDialogBaseUnits
GetCapture
MapVirtualKeyW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
LoadIconW
SetFocus
InvalidateRect
GetMessageW
TranslateMessage
DispatchMessageW
LoadCursorW
IsWindow
SetCursor
MessageBoxW
GetWindowLongW
SetWindowLongW
PostMessageW
GetParent
SendMessageW
EnableWindow
CharUpperW
SetWindowContextHelpId
ShowOwnedPopups
GetCursorPos
ValidateRect
PostQuitMessage
GetWindowTextW
GetWindowThreadProcessId
PeekMessageW
CheckMenuItem

gdi32

SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
StartDocW
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
SetStretchBltMode
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
GetTextExtentPoint32W
GetTextMetricsW
CreateFontIndirectW
EnumFontFamiliesExW
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
CreateCompatibleBitmap
GetCharWidthW
StretchDIBits
SetPolyFillMode
SetROP2
SetBkMode
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
GetDeviceCaps
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
RectVisible
CreateCompatibleDC
CreateFontW
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
PtVisible

comdlg32

GetFileTitleW

advapi32

RegEnumKeyW
RegCreateKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegSetValueW

shell32

SHGetFolderPathA
ExtractIconW
DragFinish
DragQueryFileW
SHGetFileInfoW

comctl32

ord17

shlwapi

PathRemoveFileSpecW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathFileExistsA
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoCreateInstance
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTreatAsClass
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateILockBytesOnHGlobal
OleRun
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterClassObject
CoRevokeClassObject
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
StringFromCLSID
OleSetClipboard

oleaut32

VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
LoadTypeLi
VariantClear

Sections

.text
Size: 588KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.drdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4de0be54161f8bb25625fa1216b95163

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

winspool.drv

setupapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 588KB - Virtual size: 584KB

.rdata Size: 140KB - Virtual size: 136KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 300KB - Virtual size: 297KB

.reloc Size: 44KB - Virtual size: 41KB

.drdata Size: 72KB - Virtual size: 72KB

.text
Size: 588KB - Virtual size: 584KB

.rdata
Size: 140KB - Virtual size: 136KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 300KB - Virtual size: 297KB

.reloc
Size: 44KB - Virtual size: 41KB

.drdata
Size: 72KB - Virtual size: 72KB