760eed2955edddc6571b95acd05ff0dc03d8fab992520e72fdd46446836ae5a5

Sharing

Copy URL Twitter E-mail

General

Target

760eed2955edddc6571b95acd05ff0dc03d8fab992520e72fdd46446836ae5a5
Size

242KB
MD5

078e908573fff7fddb52644b0bd6e420
SHA1

6f373a334b5c65bad8a5358dbad10a5962320c7f
SHA256

760eed2955edddc6571b95acd05ff0dc03d8fab992520e72fdd46446836ae5a5
SHA512

7ccf80a563abfba5b5814576d3c038ef3975f93da29ef31667e1f418575884298e97e323b641db6bb7ed1ffa5e7b7961bd5c966c9a32bce62e6998394bcb7b6e
SSDEEP

6144:MkYK/yE/rt+FhWPGSsjlINTEi6iyHAc+8sUft:MkYEX/rwQGhjexaHgc+wl

Score

N/A

Malware Config

Signatures

Files

760eed2955edddc6571b95acd05ff0dc03d8fab992520e72fdd46446836ae5a5
.exe windows x86

2cf6cb3f5ee328d8976c1490244de29f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ImageList_Destroy

kernel32

GlobalAddAtomA
RtlUnwind
GetLocalTime
GetFileType
HeapFree
ExitProcess
RaiseException
TerminateProcess
CreateThread
HeapAlloc
GetModuleHandleA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetStartupInfoA
HeapDestroy
ExitThread
VirtualAlloc
SetStdHandle
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapSize
GlobalHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
GetLocaleInfoW
VirtualFree
GetVersionExA
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
GetCommandLineA
OpenEventA
OpenFile
CreateFileA
SetFilePointer
WriteFile
_lclose
CloseHandle
CreateMutexA
CreateEventA
WaitForSingleObject
ReleaseMutex
SetEvent
WaitForMultipleObjects
GetVolumeInformationA
GetFullPathNameA
DeleteFileA
FindFirstFileA
FindClose
SetEndOfFile
ReadFile
FlushFileBuffers
GetProcessVersion
GetCurrentProcess
WritePrivateProfileStringA
MulDiv
GlobalFlags
GetModuleFileNameA
SetLastError
lstrcpynA
TlsGetValue
lstrcpyA
SetErrorMode
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
GetEnvironmentStringsW
GlobalUnlock
GlobalFree
GetLastError
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetVersion
lstrcatA
GlobalGetAtomNameA
SuspendThread
SetThreadPriority
ResumeThread
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcmpA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetComputerNameA
GetSystemDirectoryA
LCMapStringA
LCMapStringW
HeapCreate

user32

CharUpperA
EndDialog
DestroyMenu
FindWindowA
InvalidateRect
GetSysColorBrush
WindowFromPoint
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
IsIconic
BringWindowToTop
LoadStringA
UnregisterClassA
LoadIconA
UpdateWindow
SystemParametersInfoA
MapWindowPoints
GetSysColor
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsWindowEnabled
IsChild
GetCapture
WinHelpA
GetClassInfoA
GetMenuItemCount
ShowWindow
LoadCursorA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
EnableWindow
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxExA
SendMessageA
wsprintfA
GetSystemMetrics
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
ReleaseDC
GetDC
GetDesktopWindow
SetWindowTextA
ClientToScreen
PtInRect
GetClassNameA
GetSubMenu
GetMenuItemID
GetDlgItem
GetMenu

gdi32

DeleteObject
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetObjectA
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
SetBkColor
SetTextColor
DeleteDC
CreateBitmap

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA
EnumPrintersA

advapi32

RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
AllocateAndInitializeSid
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAce
RegCloseKey
RegSetValueExA
RegQueryValueExA
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
RegOpenKeyA
FreeSid
RegSetKeySecurity

shell32

DragFinish
DragQueryFileA

rpcrt4

I_RpcGetBuffer
NdrConformantArrayUnmarshall
RpcRaiseException
RpcMgmtStopServerListening
RpcServerUseProtseqA
RpcServerRegisterIf
RpcServerInqBindings
RpcServerUnregisterIf
RpcEpRegisterA
RpcBindingVectorFree
RpcServerListen
RpcEpUnregister
NdrClientInitializeNew
NdrConformantArrayBufferSize
NdrGetBuffer
NdrConformantArrayMarshall
NdrSendReceive
NdrConvert
NdrFreeBuffer
NdrServerInitializeNew
I_RpcGetCurrentCallHandle
RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcBindingFree
RpcStringFreeA

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2cf6cb3f5ee328d8976c1490244de29f

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

rpcrt4

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 22KB - Virtual size: 36KB

.rsrc Size: 73KB - Virtual size: 76KB

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 22KB - Virtual size: 36KB

.rsrc
Size: 73KB - Virtual size: 76KB