23d07062d813bf8361590f14a9a8ab698ef9bcbf6d252e9f79d8b9e1b869bdea

Sharing

Copy URL Twitter E-mail

General

Target

23d07062d813bf8361590f14a9a8ab698ef9bcbf6d252e9f79d8b9e1b869bdea
Size

320KB
MD5

2056a57ce349f6ac8945c7e40988cba0
SHA1

3097e8054d9b97876d79897b9930443120418ab2
SHA256

23d07062d813bf8361590f14a9a8ab698ef9bcbf6d252e9f79d8b9e1b869bdea
SHA512

a52067d30302d6c5df57b62e13bb876eb5ebd161d80c752d314263441b98917e8f71ba2dbba3bfe4b699cd8218be49c4735c7ce52859d6a6f4ef3e8149692dd3
SSDEEP

3072:Oee1VwqGnN7ENMAyWjYE1oKfWqWKvKVbk86I/LSmZCS:dY1GNoNIi0VrkS

Score

N/A

Malware Config

Signatures

Files

23d07062d813bf8361590f14a9a8ab698ef9bcbf6d252e9f79d8b9e1b869bdea
.exe windows x86

b4bb8975079bb5b07a26175126c33c49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupPromptReboot

mksetup

s4drv_GetDriverInfo
s4drv_Uninstall
s4drv_IsNeedReboot
s4drv_Install

kernel32

RtlUnwind
ExitProcess
TerminateProcess
GetStartupInfoA
RaiseException
HeapAlloc
HeapFree
HeapSize
HeapReAlloc
GetACP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
SetErrorMode
WritePrivateProfileStringA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrcpynA
GetLastError
LocalFree
CloseHandle
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetProfileStringA
InterlockedIncrement
GlobalFree
InterlockedDecrement
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
FreeLibrary
LoadLibraryA
GetCommandLineA
GetSystemDirectoryA
GetVersionExA
UnhandledExceptionFilter

user32

CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
ShowWindow
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
GetActiveWindow
EndDialog
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
GetDC
ClientToScreen
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
GrayStringA
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetParent
PostMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
GetWindowRect
InvalidateRect
UpdateWindow
LoadIconA
LoadStringA
SendMessageA
EnableWindow
GetClientRect
LoadBitmapA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
InflateRect
CharNextA
IsWindowUnicode

gdi32

GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
CreateFontA
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetObjectA
CreateSolidBrush
CreateCompatibleDC
PatBlt
GetTextExtentPointA
StretchBlt
CreateDIBitmap
BitBlt

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ord17

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mnftyqr
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4bb8975079bb5b07a26175126c33c49

Headers

File Characteristics

Imports

setupapi

mksetup

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 172KB - Virtual size: 172KB

mnftyqr Size: - Virtual size: 4KB

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 172KB - Virtual size: 172KB

mnftyqr
Size: - Virtual size: 4KB