2278e15ad2b6c70916efc6dcdcc3a845ec088322ad8626c108aca9f753a3f30c

Sharing

Copy URL Twitter E-mail

General

Target

2278e15ad2b6c70916efc6dcdcc3a845ec088322ad8626c108aca9f753a3f30c
Size

520KB
MD5

7b0e97aa04a8feaede5540f9a71d79d5
SHA1

019c9fc8355d3370a52a6a70ccfea38499cbc476
SHA256

2278e15ad2b6c70916efc6dcdcc3a845ec088322ad8626c108aca9f753a3f30c
SHA512

6365af363c3d2c6361159c286154f3d2f26f8f4ad4fd94a3c9c5cd235cef9d58485e1d2636de0196a791a9bad0f2a508ce63825aec8c62942f58e332280e5f4d
SSDEEP

6144:kHXlLci9qP8eRZZy+SC4Lth7B3GYGzbEpG9tLamNsCgXNtM7Y1L+w2:Sa8ewCMh7B3Gvz3LaNtS8D2

Score

N/A

Malware Config

Signatures

Files

2278e15ad2b6c70916efc6dcdcc3a845ec088322ad8626c108aca9f753a3f30c
.exe windows x86

b4d7839bcd53a56241a32054f2becfe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetACP
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GetModuleFileNameW
GlobalAddAtomA
WritePrivateProfileStringA
FreeResource
GetTickCount
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
GetModuleHandleA
GlobalAlloc
MulDiv
GetCurrentProcessId
SetLastError
FormatMessageA
ClearCommError
ReadFile
PurgeComm
SetCommState
GetCommState
SetCommTimeouts
SetupComm
GetVersion
CompareStringA
InterlockedExchange
CompareStringW
GetPrivateProfileIntA
GetPrivateProfileStringA
CloseHandle
WriteFile
CreateFileA
GlobalFree
GlobalUnlock
GlobalLock
FreeLibrary
GetModuleFileNameA
Sleep
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
GetLocalTime
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedDecrement
GetProcAddress
GetStdHandle
LoadLibraryA

user32

CopyAcceleratorTableA
CharNextA
PostThreadMessageA
ReleaseCapture
SetCapture
LoadCursorA
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
DestroyMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowTextLengthA
GetWindowTextA
SetFocus
UnhookWindowsHookEx
SetCursor
SetWindowsHookExA
CallNextHookEx
LoadIconA
GetSystemMetrics
IsIconic
SendMessageA
GetClientRect
DrawIcon
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
UnregisterClassA
EnableMenuItem
CheckMenuItem
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
GetMenu
IsRectEmpty
KillTimer
SetTimer
EnableWindow
CharUpperA
MessageBoxA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
GetWindowThreadProcessId
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostMessageA
PostQuitMessage
RegisterClipboardFormatA
SetWindowPos
MapDialogRect
SetWindowContextHelpId
GetWindow
EndDialog
GetNextDlgTabItem
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow

gdi32

ExtSelectClipRgn
GetStockObject
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetBkColor
DeleteDC
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetObjectA
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
Escape

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathFileExistsA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
OleFlushClipboard
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

SysAllocStringByteLen
VariantClear
VariantChangeType
VariantTimeToSystemTime
VariantInit
VariantCopy
SysStringLen
SysAllocStringLen
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
GetErrorInfo
SysFreeString

Sections

.text
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4d7839bcd53a56241a32054f2becfe7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 252KB - Virtual size: 249KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 12KB - Virtual size: 30KB

.rsrc Size: 28KB - Virtual size: 25KB

.rmnet Size: 164KB - Virtual size: 164KB

.text
Size: 252KB - Virtual size: 249KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 12KB - Virtual size: 30KB

.rsrc
Size: 28KB - Virtual size: 25KB

.rmnet
Size: 164KB - Virtual size: 164KB