32fd4d52a1193691556dec5bcce39826ee506a6fd92dc32ddda286fab7ec556b

Sharing

Copy URL Twitter E-mail

General

Target

32fd4d52a1193691556dec5bcce39826ee506a6fd92dc32ddda286fab7ec556b
Size

318KB
MD5

30789248eff26fe41d9a0f54947a345b
SHA1

0aa8edb8b598134b0f5ff3ffc8cf6bd96a15aa73
SHA256

32fd4d52a1193691556dec5bcce39826ee506a6fd92dc32ddda286fab7ec556b
SHA512

d4db6bf6fea5a4ccd98036ad805a27b27da18f3920da5b1f484100d6bfb68a619e306af98829758614ff8a96936b7badc55af90a0ba86f0215475c730a69520e
SSDEEP

6144:GMte4+unqqxjOVnR9Q+gUTXVLYGwWQOjLElsnPX7FROgwwCv8p3Vfl:G74yVTQ+TTeGOdePX7FQgwYZ

Score

N/A

Malware Config

Signatures

Files

32fd4d52a1193691556dec5bcce39826ee506a6fd92dc32ddda286fab7ec556b
.exe windows x86

1ce5f255939c23db3dec11aa7a52ea86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRectEx
FindWindowExA
SendDlgItemMessageA
GetWindow
GetDesktopWindow
GetWindowRect
GetTopWindow
DestroyWindow
SetDlgItemTextA
GetForegroundWindow
DispatchMessageA
IsZoomed
CreateDialogIndirectParamA

gdi32

DeleteEnhMetaFile
CreateDCW
GdiGetBatchLimit
ExtEscape
CombineRgn
CreateSolidBrush
CreateCompatibleBitmap
DescribePixelFormat
ExtFloodFill
GdiSetBatchLimit
Escape

advapi32

RegisterEventSourceA
RegConnectRegistryA
ReadEventLogW
GetOldestEventLogRecord
RegDeleteValueA
RegRestoreKeyA
RegQueryInfoKeyA
RegQueryValueExA
ClearEventLogW
RegFlushKey

kernel32

GetLocaleInfoA
LocalFree
VirtualQueryEx
CreateEventA
WriteProfileSectionA
GetProfileSectionA
GetProfileStringA
GetProfileIntA
GetStartupInfoA
GetACP
VirtualAllocEx
GetModuleHandleA
GetProcAddress
GlobalLock
HeapAlloc
VirtualLock
VirtualProtect
VirtualFreeEx
IsBadReadPtr
CompareStringA
VirtualUnlock
SetEvent
LocalSize

winspool.drv

DeletePrinterConnectionW
AddPrintProcessorW
AddJobA
AddPrinterDriverW
DeletePrinterDataA
EnumJobsW
DeletePrinterDriverW
DeletePrinterDriverA
EnumPrintersA
AddFormA
DeletePrinterDriverExW
GetPrinterA
GetJobA
EnumPrintProcessorsW
SetJobA

netapi32

NetGroupAddUser
NetServerTransportAdd
NetAuditWrite
NetFileEnum
NetErrorLogRead
NetConfigGet
NetGroupAdd
Netbios
NetGetDCName
NetFileGetInfo
NetConfigGetAll
NetGetJoinInformation
NetAuditClear
NetErrorLogClear
NetConnectionEnum

msvcrt

_initterm
iswctype
_XcptFilter
exit
_acmdln
__getmainargs
_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fcrm
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ce5f255939c23db3dec11aa7a52ea86

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

msvcrt

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 103KB

.fcrm Size: 320KB - Virtual size: 319KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 103KB

.fcrm
Size: 320KB - Virtual size: 319KB

.rsrc
Size: 4KB - Virtual size: 4KB