311ce91b0bacedf64d500efe57c919eef18865107d73420bc59967d121077cc8

Sharing

Copy URL

Twitter E-mail

General

Target

311ce91b0bacedf64d500efe57c919eef18865107d73420bc59967d121077cc8
Size

192KB
MD5

fb6acc3da250c5db470492f2790dc221
SHA1

d514cfd7b0ff5221d12091a0810e78e4be245ba4
SHA256

311ce91b0bacedf64d500efe57c919eef18865107d73420bc59967d121077cc8
SHA512

22354218c7ca9dc6221064a8e9dda4c931fbe5314fc61ff381bcf413b8b5452432fee1a24a3709cdce5033e4153c6163ea2d396c6cdf0dc9fb2243859f0f41d4
SSDEEP

3072:5AUvnyA6tx3W7c4iFyLN1oGpVOfZaIHmmC8J26HuSQYJ6O:rvn0xz4bB1trYmmCI2UFn

Score

N/A

Malware Config

Signatures

Files

311ce91b0bacedf64d500efe57c919eef18865107d73420bc59967d121077cc8
.exe windows x86

b16b3560d4394998f1faf83855621f37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
ReadFile
SetEndOfFile
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
HeapSize
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
DeleteCriticalSection
GetCurrentProcess
IsBadReadPtr
GetNumberFormatW
GetDateFormatW
GetTimeFormatW
GetTickCount
Sleep
HeapAlloc
GetModuleFileNameW
LoadLibraryW
LoadLibraryA
FindResourceA
FreeLibrary
LoadResource
LockResource
BeginUpdateResourceA
SizeofResource
UpdateResourceA
EndUpdateResourceA
_lread
_lwrite
CreateFileA
WriteFile
DeleteFileA
CloseHandle
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
GetProcessHeap
GlobalAlloc
GlobalFree
HeapFree
lstrcpyA
lstrcatA
FormatMessageA
LocalFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetModuleHandleA
HeapCreate
SetHandleCount
IsProcessorFeaturePresent
TerminateProcess
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer

user32

IsWindowVisible
IsChild
CreateDialogIndirectParamA
GetDC
ReleaseDC
BeginPaint
GetSystemMetrics
EndPaint
GetDlgCtrlID
GetSysColor
SetRect
LoadBitmapA
CallWindowProcW
SendMessageA
LoadImageA
CreateWindowExW
SetClassLongA
DestroyWindow
ScreenToClient
TrackMouseEvent
DeleteMenu
GetWindowRect
HideCaret
InsertMenuA
MoveWindow
GetWindowLongA
CreateMenu
CreatePopupMenu
AppendMenuA
MessageBoxA
OemToCharBuffA
FindWindowA
GetWindow
GetClassNameA
IsIconic
ShowWindow
SetForegroundWindow
CreateWindowExA
TranslateMessage
DispatchMessageA
GetMessageA
SetSysColors
GetClientRect
GetWindowTextLengthA
GetWindowTextA

gdi32

DeleteDC
GetDeviceCaps
CreateFontIndirectW
Polyline
SetBkMode
SetTextColor
GetStockObject
GetDCOrgEx
GetBoundsRect
CreateCompatibleDC
SelectObject
GetObjectA
CreateBitmap
GetPixel
SetPixel
CreateCompatibleBitmap
GdiSetBatchLimit
StretchBlt
GdiFlush
DeleteObject
GetCharWidth32A
GetDIBits
SetMapMode
SetWindowExtEx
SetViewportExtEx
TextOutA
BitBlt

winspool.drv

AddPrinterDriverA
GetPrinterDriverDirectoryA

advapi32

GetTokenInformation
SetFileSecurityA
InitializeAcl
GetNamedSecurityInfoA
InitializeSecurityDescriptor
OpenProcessToken
FreeSid
AllocateAndInitializeSid
GetSecurityInfo
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

comctl32

ord17

opengl32

wglMakeCurrent
wglDeleteContext

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b16b3560d4394998f1faf83855621f37

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

opengl32

Sections

.text Size: 91KB - Virtual size: 91KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 58KB - Virtual size: 58KB

.text
Size: 91KB - Virtual size: 91KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 58KB - Virtual size: 58KB