194a7d3237e4a40946391af59bdf6bde4d7d1e1fb392c226b6a3e192ef6d48ad

Sharing

Copy URL Twitter E-mail

General

Target

194a7d3237e4a40946391af59bdf6bde4d7d1e1fb392c226b6a3e192ef6d48ad
Size

392KB
MD5

06c895f467fdd59222ab017c1059afb0
SHA1

ed2dee261ba44593667081eab8756b545cdfabab
SHA256

194a7d3237e4a40946391af59bdf6bde4d7d1e1fb392c226b6a3e192ef6d48ad
SHA512

e658a5ce805d8b5d9cae3e0757653ab81d55edc314b735b7c5b998558d6d6bcc4b0287e5e06b7304728a9001504f9c36dbba4ea461fee88e5ac679bc5c9f21ba
SSDEEP

6144:n5SVBnXauL0gv6TZ9sVDk2Qy8wZ0VR3rRtUYH3yiQ6oVfoHQaPE0Q87ZwJ:noyuT6TZ9w8wQR3LUYBQ60oHQf8GJ

Score

N/A

Malware Config

Signatures

Files

194a7d3237e4a40946391af59bdf6bde4d7d1e1fb392c226b6a3e192ef6d48ad
.exe windows x86

60ed079fae28f25402397b988c5ee831

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
lstrcmpA
lstrlenA
LocalAlloc
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
LocalReAlloc
lstrcmpW
GlobalFlags
GlobalAddAtomW
LoadLibraryW
GetModuleHandleA
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomW
GetProcessHeap
SetEndOfFile
LCMapStringW
LCMapStringA
CreateFileA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoA
GetLocaleInfoW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedExchange
FreeLibrary
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapSize
RaiseException
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
GetModuleFileNameA
GetStdHandle
WriteFile
GetProcAddress
GetModuleHandleW
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
HeapFree
GetLastError
GetStartupInfoW
GetDiskFreeSpaceExW
GetVersionExW
GetComputerNameW
GetDriveTypeW
GlobalMemoryStatus
CloseHandle
OutputDebugStringA
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32NextW
LockResource
Process32FirstW
GetTempPathW
MultiByteToWideChar
CreateFileW
ReadFile
TerminateProcess
SizeofResource
Sleep
WideCharToMultiByte
OpenProcess
OutputDebugStringW
CreateProcessW
LoadResource
FindResourceW
GetCommandLineW
ExitProcess

user32

GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetWindowsHookExW
CallNextHookEx
DispatchMessageW
PeekMessageW
ValidateRect
SetWindowLongW
IsWindow
GetDlgItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
GetWindowTextW
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MoveWindow
GetWindowThreadProcessId
wsprintfA
MapVirtualKeyW
SendInput
GetKeyState
SetForegroundWindow
AttachThreadInput
FindWindowW
wsprintfW
GetForegroundWindow
SystemParametersInfoW
SetWindowPos
ShowWindow
SendMessageW
DestroyMenu
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
GetClassInfoExW

gdi32

PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteDC
CreateBitmap
GetStockObject
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
GetDeviceCaps

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegCloseKey
GetUserNameW
RegOpenKeyExW
RegQueryValueExW

shell32

SHGetFolderPathW
CommandLineToArgvW

shlwapi

StrRStrIW
PathFileExistsW

ws2_32

gethostbyname
closesocket
socket
recv
htons
inet_addr
WSAStartup
connect
send

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

60ed079fae28f25402397b988c5ee831

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ws2_32

oleaut32

Sections

.text Size: 194KB - Virtual size: 193KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 9KB - Virtual size: 29KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 32KB - Virtual size: 32KB

.rmnet Size: 113KB - Virtual size: 116KB

.text
Size: 194KB - Virtual size: 193KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 9KB - Virtual size: 29KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 32KB - Virtual size: 32KB

.rmnet
Size: 113KB - Virtual size: 116KB