43e1576dd557426eb4f573100b88268f6022eceb347a525508f6685addc72736

Sharing

Copy URL Twitter E-mail

General

Target

43e1576dd557426eb4f573100b88268f6022eceb347a525508f6685addc72736
Size

392KB
MD5

0ee7f6e14e798ce2edea3d974c1307d8
SHA1

b4107894f345f996490ab44a9e56e5061ee4adec
SHA256

43e1576dd557426eb4f573100b88268f6022eceb347a525508f6685addc72736
SHA512

372bed06ff94e7e807ce7ee0790222808b9bcd6b507ecea319d6d31127a03d66bf1a7d3d03b9a78f0dd44369f851d33534e507b769eecdd23388f72e4a7b2af2
SSDEEP

6144:NdIODC6Cjsf2D37B4JrfB3+pM5aIOqLVJ5bbZXegqw48gyH0YtnbvK/kFZj:NWAC6WB4Jrp3/alWJtbZU8JFtrymB

Score

N/A

Malware Config

Signatures

Files

43e1576dd557426eb4f573100b88268f6022eceb347a525508f6685addc72736
.exe windows x86

10c63ff147c4f63ebe202127f39da6d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapFree
RaiseException
TerminateProcess
HeapAlloc
HeapReAlloc
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapSize
GetVersionExA
SetFileTime
SetFileAttributesA
SystemTimeToFileTime
DeleteCriticalSection
IsBadWritePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
MultiByteToWideChar
WideCharToMultiByte
LocalFileTimeToFileTime
GetFileAttributesA
GetFullPathNameA
FindFirstFileA
FindClose
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
GetCurrentDirectoryA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
GetProcessVersion
GetLastError
GlobalFlags
LeaveCriticalSection
HeapDestroy
lstrcpynA
lstrlenA
InterlockedDecrement
EnterCriticalSection
HeapCreate
InitializeCriticalSection
InterlockedIncrement
MulDiv
SetLastError
CloseHandle
GlobalAlloc
lstrcmpA
GetCurrentThread
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
DeleteFileA
GetDriveTypeA
WaitForSingleObject
CreateProcessA
GetTempPathA
IsDBCSLeadByte
CreateDirectoryA
SetErrorMode
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetModuleFileNameA

user32

IsDialogMessageA
SetWindowTextA
ShowWindow
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
LoadStringA
DestroyMenu
ClientToScreen
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
IsWindowVisible
GetTopWindow
GetCapture
GetClassInfoA
GetMenu
PostMessageA
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
GetClassLongA
SetPropA
GetPropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
CopyRect
GetDC
ReleaseDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
wsprintfA
CharPrevA
IsIconic
GetSystemMetrics
SendDlgItemMessageA
GetClientRect
DrawIcon
LoadIconA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
GetMenuItemCount
UpdateWindow
GetSubMenu
WinHelpA
RegisterClassA
EnableWindow
SendMessageA
RemovePropA
CallWindowProcA
CallNextHookEx
UnregisterClassA

gdi32

CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

comctl32

ord17

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

p�
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

10c63ff147c4f63ebe202127f39da6d2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 92KB - Virtual size: 90KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 35KB

.rsrc Size: 16KB - Virtual size: 12KB

p� Size: 240KB - Virtual size: 240KB

.text
Size: 92KB - Virtual size: 90KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 35KB

.rsrc
Size: 16KB - Virtual size: 12KB

p�
Size: 240KB - Virtual size: 240KB