8dc6e9674d9cc1c96d04adc381580560e10f80be9d7a19fe2f927cb9f0db6282

Sharing

Copy URL Twitter E-mail

General

Target

8dc6e9674d9cc1c96d04adc381580560e10f80be9d7a19fe2f927cb9f0db6282
Size

781KB
MD5

082ae3b6f159a68c4ff1c89594b7f221
SHA1

541e2a85bb17c8e059b0ca513e941914c3baf8af
SHA256

8dc6e9674d9cc1c96d04adc381580560e10f80be9d7a19fe2f927cb9f0db6282
SHA512

ba29004f2a79f5e957559537b3917a6af077d87fed41ec24767b2acdcf0cbde0e1aecb8cdb2b1cd690db56341185573cc70ad49c172b4dc804e6ba67546e884a
SSDEEP

12288:cdV0PliAlT493aa0vHZWOj/JGBzYeBN4MRRmkUwGxzuarjyQVbNag1mGX:coPliAlET0iY36U9jyQVcQ

Score

N/A

Malware Config

Signatures

Files

8dc6e9674d9cc1c96d04adc381580560e10f80be9d7a19fe2f927cb9f0db6282
.exe windows x86

e6b2ca2af0eac0286a06dfbab6c55b05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
HeapSize
TerminateProcess
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcatA
lstrcmpW
lstrcpyA
GetCurrentThreadId
CloseHandle
GlobalFlags
lstrcmpA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
CompareStringW
CompareStringA
GetDriveTypeA
PrepareTape
LoadLibraryA
GetModuleHandleA
GetProcAddress
LocalAlloc
LocalFree
CreateThread
RemoveDirectoryA
GlobalAlloc
GlobalFree
SetErrorMode
lstrlenA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
VirtualFree
InterlockedExchange

user32

GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
CopyRect
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowPos
SetWindowLongA
GetDlgItem
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
PeekMessageA
ValidateRect
AdjustWindowRectEx
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetFocus
GetWindowTextA
SetWindowTextA
GetClassNameA
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetMenuState
GetMenuItemID
PostQuitMessage
DestroyMenu
GetMenuItemCount
GetSubMenu
UnregisterClassA
SetClipboardData
DestroyWindow
SendMessageA
SendDlgItemMessageA
CheckRadioButton
SetForegroundWindow
PostMessageA
GetMenu
GetClientRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
GetKeyState
IsIconic

gdi32

SetMapMode
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
GetDeviceCaps

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ord17

oleaut32

VariantClear
VariantInit
VariantChangeType

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 455KB - Virtual size: 454KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6b2ca2af0eac0286a06dfbab6c55b05

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comctl32

oleaut32

oleacc

Sections

.text Size: 455KB - Virtual size: 454KB

.rdata Size: 147KB - Virtual size: 147KB

.data Size: 15KB - Virtual size: 95KB

.rsrc Size: 163KB - Virtual size: 162KB

.text
Size: 455KB - Virtual size: 454KB

.rdata
Size: 147KB - Virtual size: 147KB

.data
Size: 15KB - Virtual size: 95KB

.rsrc
Size: 163KB - Virtual size: 162KB