af4cd29d948246490aafb85c5b1fbf4aed35c5c46278c85cc3ef7a3e8663db61

Sharing

Copy URL Twitter E-mail

General

Target

af4cd29d948246490aafb85c5b1fbf4aed35c5c46278c85cc3ef7a3e8663db61
Size

342KB
MD5

5694af12234bf7d2f01b8e6356197863
SHA1

62c75a791cd5e4de82451853820b9e5ffec74e5a
SHA256

af4cd29d948246490aafb85c5b1fbf4aed35c5c46278c85cc3ef7a3e8663db61
SHA512

461670a55b8aec9914419ab0ba7ec69ce527afc29731aa6cc5b198c8f42325462545dee925afd69f8e9c4d84b7847db045ab228eb9f1b2c3c1a8ed4ad0f4f584
SSDEEP

6144:z9fL112259VGf9ZG6AKF2nTDdqRmkgUJLsfJk/9HEG/BR1G5/K4Zii6yMvJY34O0:BJ12G9VGf9g612TDdqRLzJLsfJu85/Kz

Score

N/A

Malware Config

Signatures

Files

af4cd29d948246490aafb85c5b1fbf4aed35c5c46278c85cc3ef7a3e8663db61
.exe windows x86

9f904d844e57f29ecc50143ec737260e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowExA
BringWindowToTop
BeginDeferWindowPos
IsWindowUnicode
EnumChildWindows
CreateDialogIndirectParamA
OpenIcon
DestroyWindow
GetTopWindow
SetForegroundWindow
IsWindow
DispatchMessageA
GetClipboardData
CreateWindowExA
GetWindowTextLengthA
GetDialogBaseUnits

gdi32

AddFontResourceA
CreateDCW
EnumObjects
FrameRgn
ExtSelectClipRgn
CreateDiscardableBitmap
GetBkColor
CreateCompatibleDC
CreateEllipticRgn
GdiComment
FillRgn
CopyEnhMetaFileW
FloodFill

advapi32

RegCreateKeyA
GetOldestEventLogRecord
RegFlushKey
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
RegSaveKeyA

kernel32

GlobalMemoryStatus
GetLocaleInfoA
GlobalLock
SetEvent
HeapFree
GetStartupInfoA
GetPrivateProfileSectionNamesA
GetProfileStringA
GetProfileSectionA
GetProcAddress
CloseHandle
VirtualAllocEx
OpenMutexA
GetExitCodeThread
GetModuleHandleA
GetCPInfoExA
OpenEventA
MultiByteToWideChar
WideCharToMultiByte
VirtualQueryEx
HeapAlloc
SetLocaleInfoA
GlobalReAlloc
GetStringTypeA
GetOverlappedResult

winspool.drv

GetPrinterA
ClosePrinter
DeletePrinterDriverExW
AbortPrinter
DeletePrinterDriverA
DeleteFormA
AddPrinterDriverExA
SetPrinterW
AddPrinterDriverW
AddPrintProcessorA

netapi32

NetAuditRead
NetServerComputerNameAdd
NetLocalGroupDelMembers
NetConfigSet
NetFileClose
NetFileEnum
NetErrorLogRead
NetAuditClear
NetErrorLogWrite
NetGetAnyDCName
NetGetJoinInformation
NetConfigGet
NetConnectionEnum

msvcrt

__p__commode
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__setusermatherr
_adjust_fdiv
_initterm
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f904d844e57f29ecc50143ec737260e

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

msvcrt

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 320KB - Virtual size: 425KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 320KB - Virtual size: 425KB

.rsrc
Size: 4KB - Virtual size: 3KB