c32250fede73c336e7b523a431c1ae82631913a8f06380c6a4c84d7d2c402d19

Sharing

Copy URL Twitter E-mail

General

Target

c32250fede73c336e7b523a431c1ae82631913a8f06380c6a4c84d7d2c402d19
Size

248KB
MD5

9ed8fa671a56aef3086e5bff99957694
SHA1

6580df7e3ffda3c8cffbc76bc61c48502cc76dab
SHA256

c32250fede73c336e7b523a431c1ae82631913a8f06380c6a4c84d7d2c402d19
SHA512

0b6411d114672d9e181b503beab82e830f73a6ff97abe816a5e88b3395c69dcb802ce0381726018d1c4a804e380afaa971bae5d3ef5c0ad21fe98b0315f861f6
SSDEEP

3072:b/CfaZsZAdfffT+p/DfqonsBzJmqWN0emgQJCVHWdRrrELis8i5q2Wzd/0Rg9TdW:bXZXuDsBzJm3N0emgQQoOTQtXTIpZc

Score

N/A

Malware Config

Signatures

Files

c32250fede73c336e7b523a431c1ae82631913a8f06380c6a4c84d7d2c402d19
.exe windows x86

a1785d820f18ae69e41179384a896fda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ValidateRect
GetSysColorBrush
TabbedTextOutA
GetClassLongA
MessageBoxA
GetTopWindow
IsIconic
DrawIcon
SetActiveWindow
EnableWindow
MapWindowPoints
SendDlgItemMessageA
UnhookWindowsHookEx
SetPropA
ModifyMenuA
DestroyMenu
GetPropA
SetWindowTextA
LoadCursorA
GetWindowLongA
DrawTextA
WinHelpA
DispatchMessageA
LoadBitmapA
GetMenuItemCount
SendMessageA
EndDialog
CreateDialogIndirectParamA
GetForegroundWindow
SetFocus
IsDialogMessageA
SetForegroundWindow
GetSysColor
GetActiveWindow
GetMenu
IsWindowVisible
UnregisterClassA
DefWindowProcA
GetClassNameA
PostQuitMessage
GetMessageA
EnableMenuItem
PostMessageA
DdeEnableCallback
GetNextDlgTabItem
BeginPaint
AdjustWindowRectEx
CallWindowProcA
GetWindowPlacement
GetLastActivePopup
GetSystemMetrics
ShowWindow
RegisterWindowMessageA
CallNextHookEx
SetCursor
GetCursorPos
TranslateMessage
DestroyWindow
GetDC
ReleaseDC
GetMenuItemID
GetKeyState
GetMessagePos
CopyRect
RemovePropA
SetWindowPos
GetParent
GetWindowTextLengthA
UpdateWindow
IsWindow
CheckMenuItem
GetMenuState
GetClientRect
PtInRect
ExitWindowsEx
GetClassInfoA
GetWindow
EndPaint
GetCapture
GetMenuCheckMarkDimensions
GrayStringA
ClientToScreen
GetWindowTextA
LoadStringA
GetFocus
LoadIconA
RegisterClassA
GetWindowRect
GetMessageTime
CreateWindowExA
IsWindowEnabled
SetWindowLongA
GetDlgItem
GetSubMenu
SetMenuItemBitmaps
PeekMessageA
GetDlgCtrlID
SystemParametersInfoA
CharUpperA
wsprintfA
SetWindowsHookExA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

gdi32

GetObjectA
RectVisible
GdiPlayDCScript
SelectObject
DeleteObject
CreateDIBitmap
GetDeviceCaps
CreateEllipticRgn
PtVisible
EnumEnhMetaFile
GetRelAbs
ScaleWindowExtEx
ScaleViewportExtEx
SetMapMode
OffsetViewportOrgEx
TextOutA
SetViewportOrgEx
CreateBitmap
Escape
RestoreDC
SetWindowExtEx
SetViewportExtEx
ExtTextOutA
PtInRegion
SaveDC
RoundRect
SetTextColor
gdiPlaySpoolStream
GetClipBox
DeleteDC
GetStockObject
SetBkColor
GetDCPenColor

kernel32

GetVersionExA
SetEnvironmentVariableA
FindNextFileA
EnterCriticalSection
GlobalLock
ReleaseActCtx
GetLastError
SetConsoleScreenBufferSize
GlobalGetAtomNameA
SetConsoleTextAttribute
InitializeSListHead
GetCommandLineA
SetTimeZoneInformation
lstrcmpiA
SetUnhandledExceptionFilter
CompareStringA
DuplicateHandle
SetErrorMode
SetCurrentDirectoryA
IsBadWritePtr
HeapDestroy
VirtualAlloc
MultiByteToWideChar
LCMapStringW
SetConsoleCursorPosition
ReadProcessMemory
lstrcatA
LockFile
GetFullPathNameA
GlobalAddAtomA
lstrcpyA
GetCurrentDirectoryA
GlobalFree
SystemTimeToFileTime
DeleteFileA
SetSystemTime
FlushFileBuffers
GetWindowsDirectoryA
LocalUnlock
CreateFileA
GetTimeZoneInformation
MulDiv
GlobalDeleteAtom
LocalFileTimeToFileTime
FreeLibrary
WritePrivateProfileStringA
GetEnvironmentStringsW
GetVersion
HeapSize
GetCPInfo
GetOEMCP
HeapFree
IsBadReadPtr
GetCurrentThreadId
WriteFile
SetConsoleCursorInfo
GetProcessVersion
GetStartupInfoA
SetFileAttributesA
GetProcAddress
FindFirstFileA
MapUserPhysicalPages
GlobalHandle
LocalAlloc
FindClose
FileTimeToLocalFileTime
GetModuleHandleA
SetHandleCount
InterlockedDecrement
ClearCommError
TlsFree
UnlockFile
InterlockedIncrement
RaiseException
GetCurrentThread
GetCurrentProcess
lstrlenA
SetFilePointer
InitializeCriticalSection
SetStdHandle
HeapReAlloc
SetFileTime
GetVolumeInformationA
GlobalReAlloc
LoadLibraryA
GetStdHandle
GetStringTypeW
FatalExit
TlsAlloc
Beep
SetLastError
RtlUnwind
ReadFile
GetFileTime
GetDriveTypeA
HeapCreate
CompareStringW
FindResourceA
GlobalFlags
Toolhelp32ReadProcessMemory
GetFileSize
TlsGetValue
LocalFree
TerminateProcess
CloseHandle
FreeEnvironmentStringsW
UnhandledExceptionFilter
LoadResource
DeleteCriticalSection
LockResource
SetEndOfFile
IsBadCodePtr
SystemTimeToTzSpecificLocalTime
IsValidLocale
lstrcmpA
GetStringTypeA
GetFileType
Sleep
VirtualFree
FlushInstructionCache
LeaveCriticalSection
GlobalUnlock
IsDebuggerPresent
GetEnvironmentVariableA
GetFileAttributesA
GlobalAlloc
FileTimeToSystemTime
GetSystemDirectoryA
GetACP
FreeEnvironmentStringsA
LCMapStringA
LocalReAlloc
lstrcpynA
GetThreadLocale
DosDateTimeToFileTime
ExitProcess
GlobalFindAtomA
TlsSetValue
HeapAlloc
WideCharToMultiByte
GetEnvironmentStringsA
GetModuleFileNameA

comdlg32

GetFileTitleA

advapi32

RegOpenKeyExA
AddAccessDeniedAceEx
SystemFunction016
ElfOldestRecord
MSChapSrvChangePassword
RegCreateKeyExA
LsaEnumeratePrivileges
RegDeleteValueA
RegCloseKey
LockServiceDatabase
SystemFunction030
GetAclInformation
LsaICLookupNamesWithCreds
RegSetValueExA
AddUsersToEncryptedFile
ElfCloseEventLog

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1785d820f18ae69e41179384a896fda

Headers

File Characteristics

Imports

user32

winspool.drv

gdi32

kernel32

comdlg32

advapi32

Sections

.text Size: 171KB - Virtual size: 170KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 34KB - Virtual size: 34KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 171KB - Virtual size: 170KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 34KB - Virtual size: 34KB

.rsrc
Size: 27KB - Virtual size: 27KB