8b5d6ca91092b20f2d1c21be3b33965774d38e9edf1d93aa6aef5f240a875f4b

Sharing

Copy URL Twitter E-mail

General

Target

8b5d6ca91092b20f2d1c21be3b33965774d38e9edf1d93aa6aef5f240a875f4b
Size

270KB
MD5

84fe0542a8650bf95c6552f4af83bb0f
SHA1

3478dd0b5aa729c502ada2b8446f74cf0edc5526
SHA256

8b5d6ca91092b20f2d1c21be3b33965774d38e9edf1d93aa6aef5f240a875f4b
SHA512

7abbe5cc2313964a1009f66fa94bdff0a4bb48f91a0a91118c068ee7403f33d5e6a354b94ede46b46f08d2436afbf0bf4b6772560a9710568672ee5613925165
SSDEEP

6144:QlsiHt6VBIejT89bvmkD0oZR2leiUUdwhzQilT0t:ViHtYX8FooWlvHqz

Score

N/A

Malware Config

Signatures

Files

8b5d6ca91092b20f2d1c21be3b33965774d38e9edf1d93aa6aef5f240a875f4b
.exe windows x86

f7dd76736fa3a40e3b13b461a4e5cd1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

shell32

ShellExecuteW
SHGetFolderPathW

advapi32

RegCreateKeyExW
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegOpenKeyW
OpenTraceW
RegCloseKey
RegEnumKeyW
RegOpenKeyExW

wininet

InternetGetLastResponseInfoW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetOpenW
InternetReadFile
GetUrlCacheEntryInfoExW

winspool.drv

DocumentPropertiesW
EnumPrinterDataW
OpenPrinterW
ClosePrinter

user32

SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageW
SendDlgItemMessageA
RemovePropW
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OffsetRect
ModifyMenuW
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
GrayStringW
GetWindowThreadProcessId
SetRect
GetWindowTextLengthW
GetWindowRect
GetWindowDC
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
GetWindowTextW
DefWindowProcW
CreateWindowExW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CharUpperW
CharNextW
CallNextHookEx
BeginPaint
AdjustWindowRectEx

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW

kernel32

lstrlenW
lstrcmpW
lstrcmpA
WritePrivateProfileStringW
WriteFile
WriteConsoleW
WriteConsoleA
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnlockFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TerminateProcess
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
SetFileAttributesW
SetErrorMode
SetEnvironmentVariableA
RtlUnwind
ReadFile
RaiseException
QueryPerformanceCounter
MulDiv
LockResource
LockFile
LocalReAlloc
LocalFree
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsDebuggerPresent
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapReAlloc
HeapFree
HeapAlloc
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersion
GetTimeZoneInformation
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetEnvironmentStringsW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetBinaryTypeW
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
DuplicateHandle
DeleteCriticalSection
CreateFileW
CreateFileA
CloseHandle
CompareStringW
ConvertDefaultLocale
CreateDirectoryW

oleaut32

VariantCopy
SafeArrayDestroy
SysAllocString
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VarR8Pow
VariantTimeToSystemTime
VariantInit
OleCreateFontIndirect
VariantClear
VariantChangeType

comdlg32

GetFileTitleW
ChooseFontW

gdi32

TextOutW
StartPage
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetBkColor
SelectObject
OffsetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
GetTextColor
GetStockObject
GetMapMode
GetDeviceCaps
GetClipBox
ExtTextOutW
ExtSelectClipRgn
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
CreateBitmap

oledlg

OleUIBusyW

ole32

StgCreateDocfileOnILockBytes
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CoFreeUnusedLibraries
CoGetClassObject
CoInitializeEx
CoRegisterChannelHook
CoRegisterMessageFilter
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleInitialize
OleIsCurrentClipboard
OleUninitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Tok33enizerInit
Tok33enizerTerminate
Tok33tnizerTokenize

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7dd76736fa3a40e3b13b461a4e5cd1e

Headers

File Characteristics

Imports

comctl32

shell32

advapi32

wininet

winspool.drv

user32

shlwapi

kernel32

oleaut32

comdlg32

gdi32

oledlg

ole32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 60KB

.rdata Size: 140KB - Virtual size: 140KB

.data Size: 43KB - Virtual size: 156KB

.idata Size: 8KB - Virtual size: 11KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 57KB - Virtual size: 60KB

.rdata
Size: 140KB - Virtual size: 140KB

.data
Size: 43KB - Virtual size: 156KB

.idata
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 21KB - Virtual size: 23KB