6105bf318415a25a7799843ef2c30368447dce513b8887b7e6eb34c0bef5bd7e

Sharing

Copy URL Twitter E-mail

General

Target

6105bf318415a25a7799843ef2c30368447dce513b8887b7e6eb34c0bef5bd7e
Size

664KB
MD5

05a8cc19abf86bff4a56c7be6b37ca86
SHA1

055b731ca42adcd962b536d1ba38e98d6f3a8b5a
SHA256

6105bf318415a25a7799843ef2c30368447dce513b8887b7e6eb34c0bef5bd7e
SHA512

5ce77b93860171b9d1929307986acfcd239aa0d21729082ae915d0745cf4c6356ba27a07f144757b55c0f00177712d3dd275b60319eb33bd19a8a8123674da2f
SSDEEP

12288:pblVgfDDxp/LrAkpr42eNb14+8ec15XrX3Re7gw4lRkb7U1JX:pb4LDnLfpr4e+uNg7gm81N

Score

N/A

Malware Config

Signatures

Files

6105bf318415a25a7799843ef2c30368447dce513b8887b7e6eb34c0bef5bd7e
.exe windows x86

046402dcdd780d8ee00d69b12d1b8be0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleUninitialize
CoInitialize
CoTaskMemFree
CoRevokeClassObject
StringFromCLSID
CreateStreamOnHGlobal
CoInitializeSecurity
CoTaskMemRealloc
OleLockRunning
CoGetClassObject
CoUninitialize
ReleaseStgMedium

advapi32

OpenSCManagerA
RegOpenKeyExA
QueryServiceStatus
RegCloseKey
RegDeleteKeyA
CloseServiceHandle
OpenProcessToken

kernel32

SetConsoleCtrlHandler
GetACP
GetModuleFileNameA
CreateProcessA
lstrcmpiA
TlsSetValue
FreeEnvironmentStringsA
VirtualProtect
SetStdHandle
CreateMutexA
GetVersionExA
FreeEnvironmentStringsW
FindNextFileA
SetHandleCount
GetCurrentProcessId
SuspendThread
EnterCriticalSection
ConvertDefaultLocale
GetCommandLineA
GetConsoleCP
LocalFileTimeToFileTime
ResumeThread
TerminateProcess
RtlUnwind
CopyFileA
GetStringTypeA
FlushFileBuffers
GetCurrentThread
WriteFile
GlobalSize
FatalAppExitA
IsDebuggerPresent
GetUserDefaultLCID
SetFileTime
GlobalFlags
GetFileAttributesA
ExitThread
LoadLibraryA
GetFileSize
GlobalAlloc
GetStringTypeW
IsValidLocale
FindClose
GetConsoleMode
GetModuleFileNameW
InitializeCriticalSection
LockFile
SetErrorMode
SetEnvironmentVariableA
lstrlenA
GetCurrentDirectoryA
GetStringTypeExA
GetStartupInfoA
LocalAlloc
CompareStringW
GetVolumeInformationA
GetSystemInfo
GetTempFileNameA
UnhandledExceptionFilter
GetShortPathNameA
GetModuleHandleA
LocalReAlloc
SetLastError
DeleteFileA
GetSystemTimeAsFileTime
TlsGetValue
GetEnvironmentStrings
InterlockedDecrement
GetEnvironmentVariableA
GetLocaleInfoA
CreateFileA
SetCurrentDirectoryA
GetVersion
GetFileTime
GetSystemDirectoryA
CreateFileMappingA
HeapDestroy
LCMapStringA
CreateEventA
WriteConsoleA
lstrlenW
GlobalDeleteAtom
LocalFree
GetLocaleInfoW
SetEndOfFile
GetPrivateProfileStringA
FindFirstFileA
GetFullPathNameA
GetConsoleOutputCP
HeapFree
FileTimeToLocalFileTime
LockResource
CompareStringA
GetEnvironmentStringsW
UnlockFile
MapViewOfFile
SetFileAttributesA
DeleteCriticalSection
IsValidCodePage
GetDateFormatA
WritePrivateProfileStringA
FindResourceExA
SetUnhandledExceptionFilter
GetSystemTime
MultiByteToWideChar
GetCurrentThreadId
FileTimeToSystemTime
SystemTimeToFileTime
SetEvent
HeapReAlloc
lstrcmpW
DosDateTimeToFileTime
lstrcmpA
CreateThread
UnmapViewOfFile
SizeofResource
GlobalAddAtomA
CloseHandle
QueryPerformanceCounter
GetPrivateProfileIntA
HeapCreate
EnumSystemLocalesA
HeapSize
CreateFileW
VirtualAlloc
HeapAlloc
GlobalLock
FreeLibrary
SetThreadPriority
lstrcpynA
TlsAlloc
LeaveCriticalSection
InterlockedExchange
GetTickCount
ReadFile
GlobalUnlock
VirtualQuery
InterlockedIncrement
GetExitCodeProcess
MoveFileA
lstrcpyA
GlobalReAlloc
GetLocalTime
GetThreadLocale
GetTempPathA
GetProcessHeap
lstrcmpiW
SetFilePointer
FindResourceA
IsBadWritePtr
MulDiv
GetStdHandle
CreateDirectoryA
VirtualFree
TlsFree
ExitProcess
GetLastError
WaitForSingleObject
Sleep
RaiseException
InterlockedCompareExchange
GetDriveTypeA
GlobalMemoryStatus
GlobalFindAtomA
GetTimeFormatA
GetTimeZoneInformation
GetCPInfo
FormatMessageA
GetFileType
EnumResourceLanguagesA
WriteConsoleW
LCMapStringW
GetOEMCP
GlobalFree
WideCharToMultiByte
GetCurrentProcess
LoadResource
GetProcAddress
GlobalHandle

user32

SetFocus
BeginPaint
GetMenuItemCount
ReleaseCapture
ShowOwnedPopups
MsgWaitForMultipleObjects
FillRect
MessageBoxA
ShowWindow
HideCaret
OpenClipboard
ReleaseDC
RedrawWindow
RegisterClassA
InflateRect
GetWindowRect
GetDlgItemInt
CreateWindowExA
AdjustWindowRectEx
RegisterWindowMessageA
GetWindow
CharLowerA
GetActiveWindow
GetDC
RegisterClassExA
GetSystemMetrics
DestroyWindow
DrawIconEx
GetDesktopWindow
UnhookWindowsHookEx
EndPaint
DefWindowProcA
BringWindowToTop

version

GetFileVersionInfoA
GetFileVersionInfoSizeA

gdi32

RectInRegion
GetFontData
SetBkMode
GetGlyphOutlineA
Polygon
OffsetRgn
CreateHatchBrush
StartDocA
RestoreDC
Polyline
IntersectClipRect
ScaleViewportExtEx
ScaleWindowExtEx
SetBkColor
SetViewportOrgEx
SaveDC
StretchBlt
SetTextJustification
SetBrushOrgEx
SetTextAlign
SetWindowOrgEx
SelectObject
GetCharABCWidthsA
GetTextMetricsW
GetRgnBox
GetTextExtentPoint32W
Ellipse
ExcludeClipRect
CreateEllipticRgn
GetStockObject
CreatePen
CreateRoundRectRgn
DeleteDC
GetDIBits
CreateSolidBrush
LineTo
PaintRgn
RealizePalette
CreateDIBSection
SetPolyFillMode
EnumFontFamiliesExA
SetMapMode
GetViewportOrgEx
CreatePatternBrush
PtInRegion
GetViewportExtEx
GetClipRgn
CreateFontIndirectA
Rectangle
GetPixel
PolyBezier
ExtFloodFill
SetTextColor
OffsetViewportOrgEx
SetViewportExtEx
GetDeviceCaps
ExtCreatePen
ExtSelectClipRgn
GetBoundsRect
SetROP2
DPtoLP
CreatePalette
GetObjectA
CreateRectRgn
GetClipBox
SelectClipRgn
SelectPalette
CreateBitmap
CreateRectRgnIndirect
ExtTextOutW
GetMapMode
DeleteObject
SetStretchBltMode
PatBlt
CreateCompatibleBitmap
SetRectRgn

winspool.drv

OpenPrinterA
DocumentPropertiesA

comctl32

ord17
PropertySheetW
ImageList_ReplaceIcon
DestroyPropertySheetPage
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_Draw
ImageList_GetIcon
ImageList_AddMasked
_TrackMouseEvent
ImageList_LoadImageW
ImageList_Destroy
InitCommonControlsEx
ImageList_Create
ImageList_GetIconSize
ImageList_GetImageCount

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

046402dcdd780d8ee00d69b12d1b8be0

Headers

File Characteristics

Imports

ole32

advapi32

kernel32

user32

version

gdi32

winspool.drv

comctl32

Sections

.text Size: 68KB - Virtual size: 65KB

.rdata Size: 452KB - Virtual size: 451KB

.data Size: 100KB - Virtual size: 98KB

.rsrc Size: 40KB - Virtual size: 36KB

.text
Size: 68KB - Virtual size: 65KB

.rdata
Size: 452KB - Virtual size: 451KB

.data
Size: 100KB - Virtual size: 98KB

.rsrc
Size: 40KB - Virtual size: 36KB