179fb7f5ecd443c23a78cd30f705e0ae51c3c03f4bf3128dfc63fe0f48b94e12

Sharing

Copy URL Twitter E-mail

General

Target

179fb7f5ecd443c23a78cd30f705e0ae51c3c03f4bf3128dfc63fe0f48b94e12
Size

876KB
MD5

09b9873ad892a3242398918b74a3b202
SHA1

40536884f9a03423b074a46e05a4314d7600dc69
SHA256

179fb7f5ecd443c23a78cd30f705e0ae51c3c03f4bf3128dfc63fe0f48b94e12
SHA512

7041d0d83c26ad0929f37e54df0815b045720cecead1261c5f565478dd8e4a5a0bf417dfcf76a3bfaa6305575996b7bd4b1681ca75ce88844b0cd7e9db59b1d2
SSDEEP

24576:dpWWd9+PfNDgf40N5ncXoSrW7kwG0I5IY:PWWdudq4rZ6AwG75

Score

N/A

Malware Config

Signatures

Files

179fb7f5ecd443c23a78cd30f705e0ae51c3c03f4bf3128dfc63fe0f48b94e12
.exe windows x86

99113b2e9809dc9c6cf646170892b0d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
FreeEnvironmentStringsA
GetCurrentThread
VirtualQuery
RaiseException
InitializeCriticalSection
SetLastError
SetEvent
SetErrorMode
GetSystemTime
HeapValidate
GetFileType
IsValidCodePage
GetFileSize
EnterCriticalSection
LCMapStringA
OutputDebugStringW
GetOEMCP
GetVersion
GetCurrentProcess
TerminateProcess
HeapAlloc
GetTickCount
TlsSetValue
lstrlenA
LocalReAlloc
GetProcAddress
ReadFile
RtlUnwind
GetStartupInfoA
FindClose
InterlockedExchange
CreateFileA
GetModuleFileNameA
GlobalUnlock
WriteConsoleW
MulDiv
GlobalAlloc
SetUnhandledExceptionFilter
SetHandleCount
HeapDestroy
ExitThread
GetFileTime
OutputDebugStringA
CompareStringA
IsBadReadPtr
GetModuleHandleW
GetLastError
GetCurrentDirectoryA
TlsFree
GlobalHandle
GetACP
GetCurrentThreadId
GetEnvironmentStrings
ExitProcess
GetVersionExA
LoadResource
HeapFree
SetEnvironmentVariableA
GetModuleHandleA
GetConsoleMode
UnlockFile
CreateThread
GetCPInfo
CreateMutexW
GetSystemTimeAsFileTime
TlsAlloc
GetModuleFileNameW
FreeEnvironmentStringsW
DeviceIoControl
GetTimeZoneInformation
CloseHandle
lstrcpyA
DeleteFileA
GetCommandLineA
GetCurrentProcessId
WideCharToMultiByte
FileTimeToSystemTime
SetFilePointer
SetThreadPriority
LeaveCriticalSection
LocalAlloc
IsBadWritePtr
GlobalDeleteAtom
WriteConsoleA
DebugBreak
LCMapStringW
GetStringTypeW
TlsGetValue
GetTempFileNameA
InterlockedDecrement
SetStdHandle
LoadLibraryA
FlushFileBuffers
GetDateFormatA
lstrcmpiA
GetProcessHeap
MultiByteToWideChar
GetConsoleCP
GetEnvironmentStringsW
GlobalFree
InterlockedIncrement
WriteFile
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualFree
GetCommandLineW
GetConsoleOutputCP
HeapCreate
CompareStringW
SizeofResource
IsDebuggerPresent
GetTimeFormatA
SystemTimeToFileTime
GetStringTypeA
FormatMessageA
GlobalSize
VirtualAlloc
DeleteCriticalSection
LockFile
GlobalReAlloc
QueryPerformanceCounter
HeapReAlloc
LocalFree
GetLocaleInfoA
GetStartupInfoW
GetStdHandle

winspool.drv

EnumPrintersA
DocumentPropertiesA
EnumJobsA
ClosePrinter
AddPrinterDriverA
EnumPrinterDriversA
AddPrinterA
GetPrinterDriverDirectoryA
ord204

oleaut32

LoadTypeLi

gdi32

ExtTextOutW
GetMapMode
GetTextMetricsW
RectVisible
CreateCompatibleDC
ScaleWindowExtEx
StartPage
SetTextColor
CreateBrushIndirect
EndPath
ScaleViewportExtEx
SetViewportOrgEx
Escape
SelectObject
SetPolyFillMode
GetTextExtentPoint32W
SetWindowOrgEx
Ellipse
BitBlt
SetViewportExtEx
EndPage
GetRegionData
CreateRectRgn
GetBkColor
CreateRectRgnIndirect
SetTextAlign
GetViewportExtEx
SetBrushOrgEx
GetDeviceCaps
OffsetRgn
CreateFontIndirectW
GetDIBits
DeleteDC
GetObjectW
CreatePatternBrush
GetTextColor
SetBkMode
TextOutW
GetClipBox
EndDoc
LineTo
DPtoLP
GetPixel
ExcludeClipRect
SetMapMode
RealizePalette
ExtFloodFill
SetBkColor
IntersectClipRect
SetPixel
SetROP2
CreateEllipticRgn
PolyBezier
SaveDC
CreateSolidBrush
SelectPalette
GetPaletteEntries
SelectClipRgn
ExtCreatePen
OffsetViewportOrgEx
PatBlt
RectInRegion
DeleteObject
GetWindowExtEx
EnumFontFamiliesExW
MoveToEx
SetStretchBltMode
EqualRgn
RestoreDC
CreatePen
StrokePath
PtInRegion
SetWindowExtEx
CreatePolygonRgn
SetGraphicsMode
BeginPath
CreateBitmap
GetRgnBox
GetStockObject
CreateCompatibleBitmap
Rectangle
Arc
Polygon
Polyline
GdiFlush
StretchDIBits
CombineRgn
CreateDCW
StretchBlt
CreatePalette
PtVisible
GetTextMetricsA
ExtSelectClipRgn
CreateDIBSection
RoundRect

shell32

SHGetFileInfoA
DragQueryFileA
SHGetMalloc

user32

ShowWindow
DrawTextW
RegisterClassExW
LoadBitmapW
LoadCursorW
LoadAcceleratorsW
BeginPaint
DestroyAcceleratorTable
MessageBoxW
LoadIconW
CreateWindowExW
RegisterClassW
DestroyWindow
EndPaint
GetWindowRect
DefWindowProcW

comctl32

ImageList_Create
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_SetImageCount
ImageList_AddMasked

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 496KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99113b2e9809dc9c6cf646170892b0d1

Headers

File Characteristics

Imports

kernel32

winspool.drv

oleaut32

gdi32

shell32

user32

comctl32

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 496KB - Virtual size: 494KB

.data Size: 100KB - Virtual size: 97KB

.rsrc Size: 56KB - Virtual size: 53KB

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 496KB - Virtual size: 494KB

.data
Size: 100KB - Virtual size: 97KB

.rsrc
Size: 56KB - Virtual size: 53KB