8f9f40d162ef53404b673127c006467adbf1abef764c0516be3dd10183f769d5

Sharing

Copy URL

Twitter E-mail

General

Target

8f9f40d162ef53404b673127c006467adbf1abef764c0516be3dd10183f769d5
Size

668KB
MD5

0e4831ced54edec027459bb0e352fe92
SHA1

c0fb2a73e2d030c1ce45d21432cbbf2c8dc0b4ad
SHA256

8f9f40d162ef53404b673127c006467adbf1abef764c0516be3dd10183f769d5
SHA512

3af0e6e62b53c94855e53e058d136805f8a3e20ab7f61e4c7511c53297a5a1fa269c2f8220ff0c205f072c833042f9dc56e3fd2c129b33c92832bfa298a097b1
SSDEEP

12288:wmA5M9dBe95XFjGjaho6S+EI4M52KFZLxtUGYRy4/sVJQS36xKUdE0bdt5:wrGdBY5B2ahE+Eq3ZLxtbYsVJ9yvdE63

Score

N/A

Malware Config

Signatures

Files

8f9f40d162ef53404b673127c006467adbf1abef764c0516be3dd10183f769d5
.exe windows x86

576b3c905f0ce87ad14eabe88aae4e0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathRemoveFileSpecW
StrCatW
PathIsDirectoryW
PathFindFileNameW

wininet

DetectAutoProxyUrl
InternetGetCookieA
InternetConnectA
InternetCombineUrlA

winspool.drv

GetJobA
ord204
DocumentPropertiesA
OpenPrinterA
ClosePrinter

kernel32

TlsFree
GetStartupInfoA
GetCurrentThreadId
UnhandledExceptionFilter
TlsAlloc
WideCharToMultiByte
LoadLibraryA
VirtualFree
HeapCreate
GetSystemTimeAsFileTime
GetModuleFileNameA
SetEnvironmentVariableA
GetModuleHandleA
ExitProcess
TlsGetValue
SetLastError
LCMapStringA
ReadFile
GetCurrentProcess
GetSystemTime
TlsSetValue
CreateMutexA
GetStdHandle
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStrings
InitializeCriticalSection
GetTimeZoneInformation
RtlUnwind
InterlockedExchange
WriteFile
HeapDestroy
FatalAppExitA
IsBadWritePtr
MultiByteToWideChar
FlushFileBuffers
DeleteCriticalSection
GetVersion
HeapReAlloc
GetStringTypeA
CompareStringA
GetCurrentProcessId
FreeEnvironmentStringsA
CloseHandle
TerminateProcess
VirtualAlloc
HeapAlloc
GetCurrentThread
SetFilePointer
InterlockedIncrement
GetOEMCP
FreeEnvironmentStringsW
InterlockedDecrement
GetACP
GetProcAddress
GetLastError
GetTickCount
GetFileType
VirtualQuery
GetLocalTime
GetStringTypeW
GetCPInfo
SetStdHandle
CompareStringW
HeapFree
EnterCriticalSection
GetEnvironmentStringsW
LCMapStringW
GetCommandLineA
LeaveCriticalSection

advapi32

RegEnumKeyA
InitializeSecurityDescriptor
CloseServiceHandle
OpenThreadToken
ControlService
RegCloseKey
RegSetValueExA

shell32

DragQueryFileA
SHGetDesktopFolder
Shell_NotifyIconA
SHGetMalloc

user32

GetDlgItem
IntersectRect
SetTimer
CharNextA
CreateAcceleratorTableA
DestroyWindow
TranslateMessage
GetParent
TrackPopupMenuEx
EndDeferWindowPos
GetClassLongA
DefWindowProcA
RegisterClassExA
IsWindow
CreateCaret
GetDesktopWindow
GetCapture
UnhookWindowsHookEx
GetMenuState
CopyRect
SetForegroundWindow
GetSubMenu
DrawTextA
FillRect
MapVirtualKeyA
SystemParametersInfoA
SendDlgItemMessageA
ScreenToClient
InvalidateRect
FrameRect
AttachThreadInput
SetWindowLongA
IsIconic
UnregisterClassA
EndDialog
SetCursor
SetRectEmpty
DrawTextExA
ClientToScreen
CreateDialogIndirectParamA
LoadMenuA
GetActiveWindow
CheckMenuItem
EqualRect
IsMenu
RedrawWindow
GetFocus
MapWindowPoints
AdjustWindowRectEx
ReleaseDC
RegisterClassA
CopyIcon
AppendMenuA
PeekMessageA
BeginDeferWindowPos
PostThreadMessageA
EndPaint
SetMenuItemBitmaps
GetMenuItemCount
GetKeyboardLayout
KillTimer
IsWindowEnabled
BringWindowToTop
GetWindowTextLengthA
InsertMenuItemA
SetCapture
BeginPaint
CreatePopupMenu
SetActiveWindow
WinHelpA
LoadCursorA
DestroyIcon
GetSystemMenu
GetWindowLongA
RegisterWindowMessageA
MapDialogRect
OffsetRect
SendMessageA
CreateWindowExA
LoadImageA
SetRect
WindowFromPoint
TranslateAcceleratorA
SetWindowPos
ValidateRect
GetDlgCtrlID
RegisterClipboardFormatA
GetMessageA
SetWindowRgn
SetFocus
SetParent
GetKeyState
ShowCaret
GetForegroundWindow
PostMessageA
ShowScrollBar
GetSystemMetrics
CreateIconIndirect
GetClassNameA
IsChild
LockWindowUpdate
SetMenuDefaultItem
ShowWindow
EnableMenuItem
DestroyCursor
EnableWindow
TabbedTextOutA
GetClassInfoA
MessageBoxA
GetMenuItemID
GetMenu
GrayStringA
FindWindowA
UnionRect

comdlg32

GetFileTitleA
CommDlgExtendedError

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

576b3c905f0ce87ad14eabe88aae4e0b

Headers

File Characteristics

Imports

shlwapi

wininet

winspool.drv

kernel32

advapi32

shell32

user32

comdlg32

Sections

.text Size: 72KB - Virtual size: 69KB

.rdata Size: 448KB - Virtual size: 447KB

.data Size: 96KB - Virtual size: 118KB

.rsrc Size: 48KB - Virtual size: 45KB

.text
Size: 72KB - Virtual size: 69KB

.rdata
Size: 448KB - Virtual size: 447KB

.data
Size: 96KB - Virtual size: 118KB

.rsrc
Size: 48KB - Virtual size: 45KB