0171d5246d9454343e8aa7bf057182c0bd939d404c9315d7ff33b0a4edfa4e42

Sharing

Copy URL Twitter E-mail

General

Target

0171d5246d9454343e8aa7bf057182c0bd939d404c9315d7ff33b0a4edfa4e42
Size

246KB
MD5

5de05c9dce7c921f6f808425bfc9394a
SHA1

4214e9a63a5cc0da8c8de05b1a62f23afd9c4b80
SHA256

0171d5246d9454343e8aa7bf057182c0bd939d404c9315d7ff33b0a4edfa4e42
SHA512

6e980f392c1cca7ffd3372ea07b12d4d9ef9764d37f04a4b36318dc6cb084036db82d6505bae617c814b4b42d6cf4f75a1daa4b4f4b7dbdc34bb7677fff25d13
SSDEEP

6144:7svesLdY0sYs2jce0exke2DT8/rSRCixH:4pYRgce8e2DT8/rBih

Score

N/A

Malware Config

Signatures

Files

0171d5246d9454343e8aa7bf057182c0bd939d404c9315d7ff33b0a4edfa4e42
.exe windows x86

c8b78993d3be11c5e75e3a7ed37fc9da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

EnumEnhMetaFile
SetWindowExtEx
SetTextColor
GetRelAbs
GetClipBox
CreateBitmap
CreateDIBitmap
SetMapMode
ScaleViewportExtEx
DeleteObject
RoundRect
PtInRegion
GetDeviceCaps
TextOutA
GetDCPenColor
GdiPlayDCScript
GetObjectA
SaveDC
PtVisible
SelectClipRgn
RestoreDC
SelectObject
CreateEllipticRgn
DeleteDC
SetViewportExtEx

winmm

waveOutGetPitch
mixerOpen
timeGetSystemTime
mmioAdvance

winspool.drv

OpenPrinterA
ExtDeviceMode
PlayGdiScriptOnPrinterIC
QuerySpoolMode
QueryRemoteFonts
ClosePrinter
EndDocPrinter
DocumentPropertiesA
DeletePrinterIC

comdlg32

GetFileTitleA
dwOKSubclass

user32

TranslateMessage
TabbedTextOutA
GetMessageA
GetWindowRect
DispatchMessageA
GetParent
LoadStringA
GetTopWindow
IsWindowVisible
DestroyWindow
GetDlgCtrlID
LoadIconA
DefWindowProcA
IsIconic
LoadBitmapA
SendMessageA
GetClassNameA
GetWindowPlacement
PostQuitMessage
SetActiveWindow
GetClientRect
SetWindowPos
UnhookWindowsHookEx
MessageBoxA
EndDialog
GetFocus
wsprintfA
CallWindowProcA
GetWindow
GetWindowTextA
UnregisterClassA
GetMenuItemCount
SystemParametersInfoA
DestroyMenu
GetDC
CopyRect
IsWindowEnabled
GetMenu
PeekMessageA
CheckMenuItem
GetDlgItem
SendDlgItemMessageA
PostMessageA
GetMenuState
IsDialogMessageA
EnableMenuItem
GetCursorPos
ShowWindow
GetLastActivePopup
GetMenuCheckMarkDimensions
BeginPaint
CreateWindowExA
EndPaint
MapWindowPoints
ModifyMenuA
GrayStringA
GetCapture
CreateDialogIndirectParamA
DrawTextA
LoadCursorA
GetKeyState
GetSysColor
EnableWindow
ValidateRect
WinHelpA
RegisterClassA
GetMenuItemID
PtInRect
GetMessagePos
ClientToScreen
GetPropA
IsWindow
SetMenuItemBitmaps
GetActiveWindow
GetClassInfoA
ExitWindowsEx
SetForegroundWindow
SetWindowLongA
DdeEnableCallback
SetPropA
RemovePropA
SetWindowTextA
SetWindowsHookExA
CharUpperA
UpdateWindow
CallNextHookEx
DrawIcon
GetSubMenu
ReleaseDC
GetSystemMetrics
GetWindowLongA

kernel32

SetStdHandle
FindFirstFileA
GlobalAddAtomA
ReleaseActCtx
lstrcatA
GetStartupInfoA
GetCurrentThread
GetCommandLineA
ReadFile
IsValidLocale
GlobalLock
GetEnvironmentStringsA
GetProcessVersion
VirtualAlloc
HeapReAlloc
FatalExit
WritePrivateProfileStringA
IsDebuggerPresent
LockResource
LCMapStringW
GetFileTime
MulDiv
HeapAlloc
GetDriveTypeA
IsBadReadPtr
EnterCriticalSection
InitializeCriticalSection
GetACP
SetEnvironmentVariableA
GetProcAddress
GetSystemDirectoryA
CompareStringW
GetFullPathNameA
LoadLibraryA
LocalReAlloc
SetConsoleTextAttribute
UnhandledExceptionFilter
CompareStringA
RtlUnwind
GetFileType
TlsSetValue
TerminateProcess
SetConsoleCursorInfo
HeapDestroy
GlobalUnlock
GetStringTypeA
HeapCreate
FindClose
FindNextFileA
Beep
GetVersion
DeleteFileA
TlsAlloc
DuplicateHandle
FlushInstructionCache
GetEnvironmentStringsW
SetFileAttributesA
GlobalFindAtomA
UnlockFile
IsBadCodePtr
FreeEnvironmentStringsW
GetStringTypeW
InterlockedDecrement
TlsFree
LocalAlloc
lstrcmpiA
GlobalHandle
GetEnvironmentVariableA
SetHandleCount
SetUnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetVolumeInformationA
SetEndOfFile
Toolhelp32ReadProcessMemory
Sleep
GetLastError
LeaveCriticalSection
InterlockedIncrement
MultiByteToWideChar
FreeEnvironmentStringsA
SetFilePointer
GetFileSize
DosDateTimeToFileTime
lstrlenA
GlobalFlags
CloseHandle
TlsGetValue
LockFile
HeapFree
GlobalGetAtomNameA
FileTimeToSystemTime
GetCPInfo
IsBadWritePtr
lstrcpynA
LocalFileTimeToFileTime
SetCurrentDirectoryA
InitializeSListHead
SetTimeZoneInformation
ClearCommError
GetOEMCP
GetFileAttributesA
GlobalAlloc
SetErrorMode
GetVersionExA
lstrcmpA
lstrcpyA
ExitProcess
FindResourceA
GetCurrentProcess
FileTimeToLocalFileTime
LoadResource
GetCurrentThreadId
SetConsoleCursorPosition
VirtualFree
LocalUnlock
GlobalFree
LCMapStringA
WideCharToMultiByte
SetSystemTime
GetTimeZoneInformation
DeleteCriticalSection
FlushFileBuffers
LocalFree
SetLastError
GetCurrentDirectoryA
GetWindowsDirectoryA
SystemTimeToTzSpecificLocalTime
GlobalDeleteAtom
CreateFileA
GetThreadLocale
FreeLibrary
HeapSize
SystemTimeToFileTime
GetModuleHandleA
RaiseException
SetConsoleScreenBufferSize
WriteFile

advapi32

MSChapSrvChangePassword
RegSetValueExA
RegDeleteValueA
GetAclInformation
SystemFunction030
OpenThreadToken
AddUsersToEncryptedFile
LsaICLookupNamesWithCreds
LockServiceDatabase
SystemFunction016
AddAccessDeniedAceEx
SetSecurityDescriptorControl
LsaEnumeratePrivileges
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8b78993d3be11c5e75e3a7ed37fc9da

Headers

File Characteristics

Imports

gdi32

winmm

winspool.drv

comdlg32

user32

kernel32

advapi32

Sections

.text Size: 189KB - Virtual size: 189KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 34KB - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 189KB - Virtual size: 189KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 34KB - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 4KB