e36374324c13f889348805ce018c9d97e8e787bd5845cbe563719f4725eb59cc

Sharing

Copy URL Twitter E-mail

General

Target

e36374324c13f889348805ce018c9d97e8e787bd5845cbe563719f4725eb59cc
Size

224KB
MD5

538b016ec840400d788d5539cba2b0f0
SHA1

c5d8749a65268c2659c77c1094dc0d73c108a4a4
SHA256

e36374324c13f889348805ce018c9d97e8e787bd5845cbe563719f4725eb59cc
SHA512

7777a9d1e95e207c21bb6a60c05fe26deade64cf7b30d895ca5505418f43a74f97b7625dc2208fe2a45e8aecdc5037d94eaf8e31ba248ff92f5d3012352fce80
SSDEEP

6144:aYBuwJ1JJtR3yHtwS+qFmArD8z2MkIxnWkg:aYBuwzx2wS+qFNr4zvtXg

Score

N/A

Malware Config

Signatures

Files

e36374324c13f889348805ce018c9d97e8e787bd5845cbe563719f4725eb59cc
.exe windows x86

c81f4df35a867f82c4a58bd1b755d2ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetProcAddress
LoadLibraryA
CreateThread
FreeLibrary
ExitProcess
WinExec
lstrcatA
ReleaseMutex
OpenMutexA
lstrlenA
lstrcpynA
CreateFileA
CloseHandle
MoveFileExA
GetTempPathA
WriteFile
LoadResource
FindResourceA
EnumResourceNamesA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GlobalFree
ReadFile
GlobalAlloc
GetFileSize
GetFileAttributesA
lstrcpyA
WaitForSingleObject
CreateMutexA
CopyFileA
GetSystemDirectoryA
GetTickCount
GetComputerNameA
GetLocaleInfoW
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalLock
GetModuleFileNameA
ResumeThread
LockResource
GlobalUnlock
GetModuleHandleA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
SetLastError
MulDiv
InterlockedDecrement
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
WritePrivateProfileStringA
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetThreadLocale
GetCPInfo
GetOEMCP
SetErrorMode
DuplicateHandle
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageA
RtlUnwind
GetStartupInfoA
GetCommandLineA
TerminateProcess
HeapFree
ExitThread
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualProtectEx
InterlockedExchange
GetProcessVersion
Sleep
CreateProcessA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
WriteProcessMemory
SetThreadContext
VirtualAllocEx

user32

SetCursor
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
IsWindow
SetActiveWindow
EndDialog
SetWindowContextHelpId
GetWindow
SetWindowPos
MapDialogRect
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
OffsetRect
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CreateWindowExA
GetDlgCtrlID
GetWindowTextA
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
DestroyMenu
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
PostQuitMessage
PostMessageA
LoadIconA
GetClientRect
IsIconic
SendMessageA
DrawIcon
GetSystemMetrics
SetWindowLongA
GetDesktopWindow
wsprintfA
EnableWindow
UnregisterClassA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comctl32

ord17

oledlg

ord8

olepro32

ord253

userenv

CreateEnvironmentBlock

Sections

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c81f4df35a867f82c4a58bd1b755d2ae

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

winspool.drv

comctl32

oledlg

olepro32

userenv

Sections

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 172KB - Virtual size: 185KB

.rsrc Size: 8KB - Virtual size: 7KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 172KB - Virtual size: 185KB

.rsrc
Size: 8KB - Virtual size: 7KB