97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44

Sharing

Copy URL

Twitter E-mail

General

Target

97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44
Size

342KB
MD5

ca87dace630db4a884520cd56e5ac303
SHA1

cfeafec4d6cb3f29e9063430077880c91b0dc441
SHA256

97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44
SHA512

7b1d8ca265a9d8e28000f5d13312077f333ea1697b22c12761d70e405fbf7f8b419957a4dbaceecbf6f9df1a057b37fd44c15c6e2ed876e5deb19b86129a906f
SSDEEP

6144:hS+3aT6nBEKACdYKOB+/VtNZjuz4oK0dGaRB6dq3UsBtJM2ou+k7JfsNTgA6:hXaT+WKwBBktsK0dGK6gUl23+kFfokA6

Score

N/A

Malware Config

Signatures

Files

97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44
.exe windows x86

f9ce6b341bae222cdb97f8235afa629f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDeferWindowPos
SetDlgItemTextA
GetSysColor
GetLastActivePopup
IsChild
IsIconic
GetWindowPlacement
WindowFromPoint
EnumChildWindows
MoveWindow
SetWindowPlacement
SetParent
ChildWindowFromPointEx
CreateWindowExA
DispatchMessageA
GetClipboardData
SetWindowTextA
IsWindowVisible

gdi32

Chord
CreateDiscardableBitmap
EndPage
EqualRgn
CreateDCA
GdiComment
DrawEscape
GetBitmapDimensionEx
CreateSolidBrush
Arc
DeleteMetaFile
FloodFill
AddFontResourceA
CreateFontA
CreateCompatibleBitmap

advapi32

RegOpenKeyA
RegConnectRegistryA
ClearEventLogW
RegDeleteValueA
RegSetValueExA
RegSetValueA
RegisterEventSourceW
ReadEventLogA
RegEnumValueA
RegSaveKeyA
RegQueryInfoKeyA

kernel32

GlobalReAlloc
VirtualAlloc
HeapSize
LocalAlloc
HeapWalk
GlobalUnlock
GetStartupInfoA
InitializeCriticalSection
SetThreadLocale
HeapLock
OpenEventA
WritePrivateProfileStringA
GetProcAddress
GetExitCodeThread
CloseHandle
VirtualAllocEx
GetModuleHandleA
OpenMutexA

winspool.drv

EnumPrinterDriversW
GetPrinterW
AddPrintProcessorW
SetPrinterA
EnumJobsW
AddPrinterDriverW
AddPrinterDriverA
GetJobA
EnumPrintProcessorsA
DeletePrinterConnectionA

netapi32

NetGetJoinInformation
NetServerComputerNameDel
NetLocalGroupDelMembers
NetConfigGet
NetConnectionEnum
NetAuditWrite
NetGroupAddUser
NetErrorLogRead
NetAuditClear
NetAuditRead
NetErrorLogClear
NetErrorLogWrite
NetGetJoinableOUs

msvcrt

__p__fmode
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9ce6b341bae222cdb97f8235afa629f

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

msvcrt

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 320KB - Virtual size: 424KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 320KB - Virtual size: 424KB

.rsrc
Size: 4KB - Virtual size: 3KB