92cb0ab50e7df8cb6c163b5ba21189c60d72434699fb62aaab402eadff77b820

Sharing

Copy URL Twitter E-mail

General

Target

92cb0ab50e7df8cb6c163b5ba21189c60d72434699fb62aaab402eadff77b820
Size

285KB
MD5

2220f3590845174234c3716b91fe33d6
SHA1

4e607546b2ad7e62047916a885d28947ecf870f1
SHA256

92cb0ab50e7df8cb6c163b5ba21189c60d72434699fb62aaab402eadff77b820
SHA512

13273beab71680ca909933ff3a7b06e7337d893f1170f54ec015314b3885a3dfe43346e9a64edd83c531bfa59bb9e3e83f8072a74c455e8bec4e833f05527c5d
SSDEEP

6144:cpNimEPUoOBO3amOtgOjLHcrpoq4ZLq34Ongu5GF:cqFPu6On389oBtqqu+

Score

N/A

Malware Config

Signatures

Files

92cb0ab50e7df8cb6c163b5ba21189c60d72434699fb62aaab402eadff77b820
.exe windows x86

34b0bf3dc060ce00947959566006ddf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoCreateInstance

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
RaiseException
ExitProcess
HeapSize
GetCPInfo
GetACP
TerminateProcess
FileTimeToLocalFileTime
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
RtlUnwind
GetOEMCP
GetTimeZoneInformation
FileTimeToSystemTime
WriteFile
GetFileType
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
WaitForSingleObject
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
SetErrorMode
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
MulDiv
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
FindNextFileA
SetLastError
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
LocalFree
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcmpiA
GetVersionExA
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
ReadFile
GetLastError
OpenProcess
CreateFileA
DuplicateHandle
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
ReleaseMutex
CreateMutexA
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCurrentProcess
GetModuleFileNameA
GetUserDefaultLangID
GetCurrentThread
WinExec
RemoveDirectoryA
GetSystemDirectoryA
CopyFileA
SetFileAttributesA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetTempFileNameA
CreateDirectoryA
FormatMessageA
MultiByteToWideChar
GetTempPathA
lstrlenA
HeapFree
lstrcpyA
HeapAlloc
WideCharToMultiByte
GetProcessHeap
CloseHandle

user32

ScreenToClient
EndDeferWindowPos
BeginDeferWindowPos
GetClientRect
DeferWindowPos
ScrollWindow
AdjustWindowRectEx
GetSysColor
MapWindowPoints
SystemParametersInfoA
GetClassNameA
PtInRect
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetSysColorBrush
LoadStringA
EqualRect
CopyRect
InvalidateRect
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
WinHelpA
SetMenu
GetMenu
GetClassInfoA
LoadMenuA
DestroyMenu
GetDesktopWindow
GetWindow
GetCapture
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
SetScrollInfo
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
SetFocus
IsWindowEnabled
ShowWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextA
SetWindowTextA
GetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
SetCursor
ShowOwnedPopups
SendMessageA
PostQuitMessage
EnableWindow
wsprintfA
KillTimer
PostMessageA
SetTimer
LoadIconA
FindWindowA
UpdateWindow
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
RegisterClassA
GetTopWindow
IsChild
GetClassLongA
DefWindowProcA
CreateWindowExA
GetForegroundWindow
SetPropA
UnhookWindowsHookEx
CallWindowProcA
SetForegroundWindow
GetPropA
GetMessagePos
RemovePropA
GetMessageTime
BringWindowToTop
GetWindowRect
GetLastActivePopup
SetActiveWindow
IsIconic
IsWindow
CharUpperA
SetWindowPos
EndDialog
WindowFromPoint
UnregisterClassA

gdi32

SetTextColor
GetObjectA
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
CreateBitmap
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SetBkColor
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape

comdlg32

GetFileTitleA

winspool.drv

AddPrinterDriverA
DeleteMonitorA
AddMonitorA
GetPrinterDriverA
DocumentPropertiesA
SetPrinterA
GetPrinterA
EnumPrintersA
GetPrinterDriverDirectoryA
EnumPrinterDriversA
OpenPrinterA
ClosePrinter

advapi32

RegEnumValueA
CreateProcessAsUserA
CopySid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
LookupAccountSidA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
EqualSid

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
DragFinish
DragQueryFileA

comctl32

ord17
ImageList_Destroy

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

34b0bf3dc060ce00947959566006ddf4

Headers

File Characteristics

Imports

ole32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 161KB - Virtual size: 161KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 17KB - Virtual size: 31KB

.rsrc Size: 2KB - Virtual size: 2KB

.4rdata Size: 68KB - Virtual size: 68KB

.text
Size: 161KB - Virtual size: 161KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 17KB - Virtual size: 31KB

.rsrc
Size: 2KB - Virtual size: 2KB

.4rdata
Size: 68KB - Virtual size: 68KB