33928952802a6ee28c66e640e93d23e6742b94d1ebf5f2d989d1e551cbe0abc0

Sharing

Copy URL

Twitter E-mail

General

Target

33928952802a6ee28c66e640e93d23e6742b94d1ebf5f2d989d1e551cbe0abc0
Size

380KB
MD5

4133a9e2f1d88f3b81b03052887e4d1b
SHA1

3e8e541999e92f3d3bfb4d120c2ad2b2e402737a
SHA256

33928952802a6ee28c66e640e93d23e6742b94d1ebf5f2d989d1e551cbe0abc0
SHA512

9544685ba902274e57bf6ae34e92ea8525925e66bab7df2fd0fcb3c85b31c2c8a939eeeef2cdfddbc7ade12b701b7f1e1d75a081f4f26721f2dfa1ee448d4bbf
SSDEEP

6144:JEjf7YbhuAazM5br0XJasJjWOHIVHRxYfJr3EGUhURDR+Ro5BuyqAk:JEjTYQIi5IVHyJtUw9+R6bk

Score

N/A

Malware Config

Signatures

Files

33928952802a6ee28c66e640e93d23e6742b94d1ebf5f2d989d1e551cbe0abc0
.exe windows x86

76452aebdd22d2759b69bc6b928cd771

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
MoveFileW
lstrcpynW
GetNumberFormatW
GetFileTime
CreateFileW
Sleep
GetCurrentProcess
FindClose
FindNextFileW
FreeLibrary
GetFullPathNameW
lstrcmpW
HeapFree
HeapCreate
HeapDestroy
lstrlenA
MultiByteToWideChar
RemoveDirectoryW
ReleaseMutex
CreateDirectoryW
GlobalLock
GlobalUnlock
GlobalSize
GlobalReAlloc
GetDateFormatW
GetTimeFormatW
GlobalAlloc
SetFileAttributesW
IsDBCSLeadByteEx
WideCharToMultiByte
EnterCriticalSection
UnhandledExceptionFilter
LocalAlloc
InitializeCriticalSection
LocalFree
CreateProcessW
MapViewOfFile
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
DisableThreadLibraryCalls
DeleteCriticalSection
lstrlenW
lstrcpyW
GetSystemDirectoryW
FindFirstFileW
UnmapViewOfFile
CloseHandle
CreateFileMappingW
OutputDebugStringW
GetProcessHeap
OutputDebugStringA
GlobalFree
LeaveCriticalSection
lstrcmpiW
GetModuleHandleW
GetWindowsDirectoryW
LocalReAlloc
HeapAlloc

user32

GetClientRect
ReleaseDC
DrawTextExW
GetParent
CharPrevW
CharUpperBuffW
CharLowerW
IntersectRect
InsertMenuItemW
SetCursor
LoadCursorW
GetDesktopWindow
CharNextW
SetRect
DrawTextW
OffsetRect
FillRect
DestroyIcon
MsgWaitForMultipleObjects
GetSysColor
DrawFocusRect
InsertMenuW
GetKeyState
LoadIconW
EnableWindow
SetWindowTextW
CharUpperW
CheckRadioButton
CreatePopupMenu
SetForegroundWindow
HideCaret
ShowCaret
GetFocus
IsWindowEnabled
RegisterClassExW
RedrawWindow
SystemParametersInfoW
UnregisterClassW
BeginPaint
DrawEdge
EndPaint
GetMenuItemInfoW
UnionRect
ScreenToClient
DestroyMenu
LoadBitmapW
InflateRect
TrackPopupMenu
DeleteMenu
SetMenuItemInfoW
DefWindowProcW
FindWindowW
WaitForInputIdle
LoadStringW
GetDlgItem
GetWindowLongW
SetWindowLongW
GetWindowLongA
CallWindowProcW
CreateWindowExW
UpdateWindow
SwitchToThisWindow
InvalidateRect
DefDlgProcW
WinHelpW
DestroyWindow
ShowWindow
BeginDeferWindowPos
EndDeferWindowPos
GetProcessDefaultLayout
GetSysColorBrush
GetSystemMetrics
GetDC

winspool.drv

ClosePrinter
GetPrinterDriverDirectoryW
GetPrinterW
GetPrinterDriverW
OpenPrinterW

advapi32

RegSetValueW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegEnumKeyW

shell32

SHChangeNotify
SHGetDesktopFolder
ShellExecuteExW

msvcrt

malloc
memmove
free

shlwapi

PathFindExtensionA
PathCombineW

Sections

.text
Size: 344KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

76452aebdd22d2759b69bc6b928cd771

Headers

File Characteristics

Imports

kernel32

user32

winspool.drv

advapi32

shell32

msvcrt

shlwapi

Sections

.text Size: 344KB - Virtual size: 340KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 7KB

.text
Size: 344KB - Virtual size: 340KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 7KB