682afecc1e0f69710cc096f9f72232c393d2192644e675feaea5f724ea789cc3

Sharing

Copy URL Twitter E-mail

General

Target

682afecc1e0f69710cc096f9f72232c393d2192644e675feaea5f724ea789cc3
Size

96KB
MD5

8f04c69a3b97d86da3f428018c4372e0
SHA1

d09bc9354e1703586cd745da7efe7dc128c3dfeb
SHA256

682afecc1e0f69710cc096f9f72232c393d2192644e675feaea5f724ea789cc3
SHA512

76949be456df54619f712a804e055956c71b988dd9589f073bbe0561df9cae407ee83c584b5da9a0061e85f3705374e91fee5d9f734dd5bea1223273afd83476
SSDEEP

1536:Cv+p307r17jTITfs+8TyEYKfVHL3f5Buz8NJ4v2ilwL8ymWlOgLzrA:Cu07ryTfpKfVHr5Bc+0ynl9r

Score

N/A

Malware Config

Signatures

Files

682afecc1e0f69710cc096f9f72232c393d2192644e675feaea5f724ea789cc3
.exe windows x86

27d7aa92bd52699f1ed3a8d7260b6aca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
LocalFree
lstrcatA
GetProcessHeap
HeapAlloc
SetLastError
GetLastError
lstrcpynA
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
GetVersion
InterlockedIncrement
ResumeThread
GetCurrentThreadId
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
WideCharToMultiByte
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetProcessVersion
lstrcmpA
GlobalFlags
GetCPInfo
GetOEMCP
GetCurrentProcess
CreateFileA
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
ExitThread
GetCommandLineA
ExitProcess
RaiseException
RtlUnwind
HeapSize
HeapReAlloc
TerminateProcess
GetACP
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
HeapFree
GetStartupInfoA
ReadFile
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryA
GetProcAddress
FreeLibrary
SetEvent
WaitForSingleObject
CreateEventA
CreateMutexA
CreateThread
WaitForMultipleObjects
Sleep
CloseHandle
GetModuleFileNameA
lstrlenA
GlobalFindAtomA
MultiByteToWideChar

user32

GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
LoadStringA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
wsprintfA
SendMessageA

advapi32

RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteExA

ole32

CoUninitialize
CoInitializeSecurity
CoCreateInstance
CoInitialize

oleaut32

VariantInit
SysAllocStringLen
VarBstrCat
SafeArrayCreate
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetElement
VariantClear
SysFreeString
SysAllocString

comctl32

ord17

iphlpapi

GetInterfaceInfo
GetPerAdapterInfo
GetAdaptersInfo

mprapi

MprConfigServerConnect
MprConfigGetFriendlyName

ws2_32

WSAGetLastError
ioctlsocket
inet_addr
htons
bind
closesocket
recvfrom
socket
gethostname
gethostbyname
WSACleanup
inet_ntoa
sendto
select
recv
send
connect
WSAStartup

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
ScaleWindowExtEx
SetWindowExtEx
GetClipBox
SetTextColor
ScaleViewportExtEx
SetViewportExtEx
Escape
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
CreateBitmap
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetMapMode

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27d7aa92bd52699f1ed3a8d7260b6aca

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

iphlpapi

mprapi

ws2_32

gdi32

winspool.drv

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 8KB - Virtual size: 51KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 8KB - Virtual size: 51KB

.rsrc
Size: 4KB - Virtual size: 1KB