21bcf778035200633d0f3b9542f38b7bf629272bf544d0494d7a932130e0794c

Sharing

Copy URL Twitter E-mail

General

Target

21bcf778035200633d0f3b9542f38b7bf629272bf544d0494d7a932130e0794c
Size

868KB
MD5

594c4e162af677790c638dfe86152474
SHA1

8e96ae7daa2897cf5cf15eae414430672861fca1
SHA256

21bcf778035200633d0f3b9542f38b7bf629272bf544d0494d7a932130e0794c
SHA512

422af08ae99067437a0270bb64c32ae0b71a0c7c7e59d466ed5be5e130aa0f70ef40eb83a4f6ce883fd037ced09f3e49c2ec1de1192c5e376d43cafb177fb1a7
SSDEEP

12288:y4sF0M9YgjkOQvaNKKv3gcGms2dUFc1+HOUyALXmCDloL5l4achUYsyr6vR+S0XI:qYgj8A7vrn9MiAy+mfbcCYe+rzC4od

Score

N/A

Malware Config

Signatures

Files

21bcf778035200633d0f3b9542f38b7bf629272bf544d0494d7a932130e0794c
.exe windows x86

5f330f50e473caaa0a10b977b9cc1352

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
TerminateProcess
HeapSize
HeapReAlloc
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetStringTypeA
GetStringTypeW
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
RaiseException
RtlUnwind
ExitProcess
GetStartupInfoW
FindResourceA
GlobalAddAtomA
GetProfileStringA
GetTickCount
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesW
SizeofResource
WritePrivateProfileStringW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessVersion
GlobalFlags
MulDiv
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SetLastError
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
GetLastError
GlobalUnlock
GlobalFree
CloseHandle
GlobalLock
lstrcmpW
GlobalAlloc
lstrcmpA
lstrcmpiA
GetCurrentThread
FormatMessageW
LocalFree
lstrcpynW
lstrcmpiW
WideCharToMultiByte
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetThreadLocale
GetModuleHandleA
FreeLibrary
lstrlenA
FindResourceW
LoadResource
LockResource
GetVersion
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetModuleHandleW
GetProcAddress
LoadLibraryA
GetModuleFileNameW
SetUnhandledExceptionFilter
MultiByteToWideChar

user32

InvalidateRect
PostThreadMessageW
SetCursor
PostQuitMessage
CharNextW
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
PostMessageW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
GetClientRect
CopyRect
GetTopWindow
IsChild
GetParent
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetNextDlgGroupItem
GetMenuItemID
GetDlgItem
GetWindowTextW
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
EnableWindow
MessageBoxW
LoadIconW
GetSystemMetrics
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageW
GetWindow
GetWindowLongW
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
OffsetRect
RegisterClipboardFormatW
InflateRect
IsWindowVisible
MessageBeep
IntersectRect
SystemParametersInfoW
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
GetWindowRect
GetWindowPlacement
IsIconic
LoadStringW
SetRect
CopyAcceleratorTableW
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
GetSubMenu
BeginPaint
GetWindowDC
DestroyMenu
GetDC
ReleaseDC
GetSysColorBrush
LoadCursorW
GetDesktopWindow
ClientToScreen
PtInRect
GetClassNameW
CharUpperW
MapDialogRect
SetWindowContextHelpId
GetCursorPos
CreateDialogIndirectParamW
GetMessageW
TranslateMessage
GetActiveWindow
GetCapture
ValidateRect
EndDialog

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SelectObject
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
DPtoLP
LPtoDP
GetMapMode
PatBlt
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetStockObject
GetDeviceCaps
GetBkColor
GetTextColor
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

IsTextUnicode
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

comctl32

ord17

oledlg

OleUIBusyW

ole32

OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
VariantCopy
SysAllocString
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
VariantClear
SysFreeString

Sections

.text
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 640KB - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f330f50e473caaa0a10b977b9cc1352

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 164KB - Virtual size: 161KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 20KB - Virtual size: 34KB

.rsrc Size: 640KB - Virtual size: 636KB

.text
Size: 164KB - Virtual size: 161KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 20KB - Virtual size: 34KB

.rsrc
Size: 640KB - Virtual size: 636KB