6f6cb27d77c9ada3f782205fcc99b67660d4adf5a794e18ddd6821453dc0ae0b

Sharing

Copy URL Twitter E-mail

General

Target

6f6cb27d77c9ada3f782205fcc99b67660d4adf5a794e18ddd6821453dc0ae0b
Size

349KB
MD5

b76a594cb4a2b21c0574203ce100162c
SHA1

427c36b38fac844e18d10aa06e7be98bd8f771be
SHA256

6f6cb27d77c9ada3f782205fcc99b67660d4adf5a794e18ddd6821453dc0ae0b
SHA512

787f1012c5da21c395c23beeb11ef941c0dfac901fe982dbfacc112b0f3252a1329bb1d541f4d8ec2a81ef09cecfba1633b515afaa8236a650f78f3e90efc6c0
SSDEEP

6144:EqQeh6PECwfku+J9JVvHjaWQdiQ4v9RkWGC8P8gcy2VlvLviwsBM3J:Efemp9JVraW6qcx78s22M3J

Score

N/A

Malware Config

Signatures

Files

6f6cb27d77c9ada3f782205fcc99b67660d4adf5a794e18ddd6821453dc0ae0b
.exe windows x86

1ce5f255939c23db3dec11aa7a52ea86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRectEx
FindWindowExA
SendDlgItemMessageA
GetWindow
GetDesktopWindow
GetWindowRect
GetTopWindow
DestroyWindow
SetDlgItemTextA
GetForegroundWindow
DispatchMessageA
IsZoomed
CreateDialogIndirectParamA

gdi32

DeleteEnhMetaFile
CreateDCW
GdiGetBatchLimit
ExtEscape
CombineRgn
CreateSolidBrush
CreateCompatibleBitmap
DescribePixelFormat
ExtFloodFill
GdiSetBatchLimit
Escape

advapi32

RegisterEventSourceA
RegConnectRegistryA
ReadEventLogW
GetOldestEventLogRecord
RegDeleteValueA
RegRestoreKeyA
RegQueryInfoKeyA
RegQueryValueExA
ClearEventLogW
RegFlushKey

kernel32

GetLocaleInfoA
LocalFree
VirtualQueryEx
CreateEventA
WriteProfileSectionA
GetProfileSectionA
GetProfileStringA
GetProfileIntA
GetStartupInfoA
GetACP
VirtualAllocEx
GetModuleHandleA
GetProcAddress
GlobalLock
HeapAlloc
VirtualLock
VirtualProtect
VirtualFreeEx
IsBadReadPtr
CompareStringA
VirtualUnlock
SetEvent
LocalSize

winspool.drv

DeletePrinterConnectionW
AddPrintProcessorW
AddJobA
AddPrinterDriverW
DeletePrinterDataA
EnumJobsW
DeletePrinterDriverW
DeletePrinterDriverA
EnumPrintersA
AddFormA
DeletePrinterDriverExW
GetPrinterA
GetJobA
EnumPrintProcessorsW
SetJobA

netapi32

NetGroupAddUser
NetServerTransportAdd
NetAuditWrite
NetFileEnum
NetErrorLogRead
NetConfigGet
NetGroupAdd
Netbios
NetGetDCName
NetFileGetInfo
NetConfigGetAll
NetGetJoinInformation
NetAuditClear
NetErrorLogClear
NetConnectionEnum

msvcrt

_initterm
iswctype
_XcptFilter
exit
_acmdln
__getmainargs
_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.afkos
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ce5f255939c23db3dec11aa7a52ea86

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

msvcrt

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 104KB

.afkos Size: 320KB - Virtual size: 319KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 104KB

.afkos
Size: 320KB - Virtual size: 319KB

.rsrc
Size: 4KB - Virtual size: 4KB