2b1caa70569901df1ce6609bf6df985f9cafa511aeaf6d3fbbf317a0307f7fae

Sharing

Copy URL

Twitter E-mail

General

Target

2b1caa70569901df1ce6609bf6df985f9cafa511aeaf6d3fbbf317a0307f7fae
Size

454KB
MD5

0797cfe62e189008428e55932cef26b6
SHA1

b010320e8ea01a4a06f22e15440b27e255349ab5
SHA256

2b1caa70569901df1ce6609bf6df985f9cafa511aeaf6d3fbbf317a0307f7fae
SHA512

1230f3b14193eaeb83be1181d7f2604e00e5409aaa20feb8c02c235a70978dd731582cf2ad0b38e6a5c751fb91ed71aa679e056b409898bcdf022828735de885
SSDEEP

12288:5vA8Vkn6Jmj9BUIqNUzN8fxKLr7YcV5CTv9Xo:1Akkn6J0UIqqNzr7YcV5Mv9

Score

N/A

Malware Config

Signatures

Files

2b1caa70569901df1ce6609bf6df985f9cafa511aeaf6d3fbbf317a0307f7fae
.exe windows x86

2454edb5c162344fd205269df560dfc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageA
DestroyPropertySheetPage
ImageList_ReplaceIcon
ImageList_GetImageCount
InitCommonControlsEx
ImageList_Add
ImageList_GetIcon
ord17
ImageList_GetImageInfo
ImageList_AddMasked

shlwapi

StrStrA
StrStrIA
PathCompactPathA
StrToIntW
SHDeleteKeyW

gdi32

FlattenPath
ExtFloodFill
GetClipBox
SelectObject
GetStockObject
GetPath
EndDoc
GetBkMode
SetPixel
SetTextJustification
StartPage
SetViewportExtEx
EqualRgn
SetBrushOrgEx
CreateCompatibleBitmap
EndPage
Pie
SetTextColor
SelectClipPath
GetNearestColor
CreateSolidBrush

user32

GetSubMenu
EnumWindows
ReleaseDC
CreateWindowExW
GetKeyboardLayout
MessageBoxW
IsWindow
InvalidateRgn
GetSystemMetrics
EmptyClipboard
EndDeferWindowPos
CallNextHookEx
RegisterClassExW
ScreenToClient
TranslateMessage
FrameRect
GetActiveWindow
GetMenuItemInfoW
ShowWindow
GetScrollInfo
BeginDeferWindowPos
SetRectEmpty
GetTopWindow
CopyRect
SetCapture
SetParent
IsZoomed
EnableMenuItem
SetClipboardData
SetWindowRgn
DrawIconEx
EndDialog
SetFocus
OffsetRect
FillRect
GetForegroundWindow
DefWindowProcW
DrawFocusRect
CopyAcceleratorTableW
GetFocus
wsprintfW
WindowFromPoint
RegisterClassW
GetDlgCtrlID
GetSysColor
MoveWindow
EndPaint
GetKeyState
InvalidateRect
GetNextDlgTabItem
UpdateWindow
DestroyWindow
BeginPaint
UnhookWindowsHookEx
LoadCursorW
PeekMessageW
GetDC
SetWindowsHookExW
EnableWindow
GetMessageW
UnregisterClassA
SetTimer
DeferWindowPos
ReleaseCapture

kernel32

GetStringTypeA
ExitThread
GetFileAttributesA
GetModuleHandleW
UnhandledExceptionFilter
GlobalAlloc
WriteConsoleA
SetFileTime
SetEvent
SetLastError
WriteFile
SetHandleCount
lstrcmpW
GetFileTime
DeleteCriticalSection
lstrcmpiW
GetCPInfo
RaiseException
LoadLibraryA
LCMapStringW
GetTimeFormatA
MultiByteToWideChar
GlobalUnlock
GetSystemInfo
FindNextFileW
SuspendThread
lstrcpynW
WaitForSingleObject
GetModuleFileNameA
TlsSetValue
FileTimeToLocalFileTime
GetCurrentThread
QueryPerformanceCounter
SetFilePointer
VirtualQuery
SetEnvironmentVariableA
GetLocaleInfoW
Sleep
GetStringTypeExW
FileTimeToSystemTime
CreateFileA
GetStartupInfoW
CreateDirectoryA
GlobalDeleteAtom
GetTempPathA
GlobalLock
CreateFileW
InterlockedCompareExchange
GetVersionExW
lstrlenW
InterlockedExchange
lstrcmpA
FlushInstructionCache
DeleteFileA
GetConsoleMode
GetEnvironmentStringsW
TlsFree
IsBadWritePtr
WideCharToMultiByte
CloseHandle
GetEnvironmentStrings
InterlockedDecrement
LeaveCriticalSection
FreeEnvironmentStringsA
TlsGetValue
FormatMessageA
GetUserDefaultLCID
GetDateFormatA
GetFileType
GetFileSize
lstrcpyW
HeapDestroy
GetStringTypeW
VirtualAlloc
GetProcessHeap
GetSystemTime
GetCurrentDirectoryA
GetTimeZoneInformation
HeapCreate
IsValidLocale
GetCommandLineW
SetThreadPriority
ReadFile
InitializeCriticalSection
SystemTimeToFileTime
IsDebuggerPresent
SetErrorMode
MapViewOfFile
CompareStringW
GetDriveTypeA
InterlockedIncrement
GetSystemTimeAsFileTime
GetTickCount
GetLastError
GetStartupInfoA
HeapFree
HeapAlloc
RtlUnwind
GetVersion
GetEnvironmentVariableW
GetModuleHandleA
SetUnhandledExceptionFilter
LocalFileTimeToFileTime
GlobalFree
FreeEnvironmentStringsW
FreeLibrary
GlobalFlags
GlobalReAlloc
GetLocaleInfoA
SetStdHandle
IsValidCodePage
GetCurrentThreadId
lstrlenA
GlobalSize
CompareStringA
FreeResource
GetCurrentProcess
EnterCriticalSection
GetCommandLineA
LocalFree
TerminateProcess
GetLocalTime
VirtualFree
LCMapStringA
SetEndOfFile
GetVersionExA
GetStdHandle
ExitProcess
FindClose
TlsAlloc
GetOEMCP
lstrcmpiA
FatalAppExitA
CreateMutexW
VirtualProtect
HeapReAlloc
GetModuleFileNameW
SizeofResource
GetThreadLocale
GetACP
lstrcpyA
FlushFileBuffers
CreateDirectoryW
GetProcAddress
GetCurrentProcessId
HeapSize

ole32

OleUninitialize
CoTaskMemFree
CoTaskMemAlloc

advapi32

RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegEnumValueA
RegCreateKeyA
RegDeleteValueA
QueryServiceConfigA
QueryServiceStatus
RegSetValueExA
CloseServiceHandle

winspool.drv

DocumentPropertiesA
ClosePrinter

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2454edb5c162344fd205269df560dfc6

Headers

File Characteristics

Imports

comctl32

shlwapi

gdi32

user32

kernel32

ole32

advapi32

winspool.drv

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 256KB - Virtual size: 256KB

.data Size: 62KB - Virtual size: 78KB

.rsrc Size: 46KB - Virtual size: 46KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 256KB - Virtual size: 256KB

.data
Size: 62KB - Virtual size: 78KB

.rsrc
Size: 46KB - Virtual size: 46KB