87b1a7b6a4d2b17ad192a46d2eb2390a6968980ae0ed2fef2b2d1864784960a7

Sharing

Copy URL Twitter E-mail

General

Target

87b1a7b6a4d2b17ad192a46d2eb2390a6968980ae0ed2fef2b2d1864784960a7
Size

142KB
MD5

724624ae22398b855c27c32a4a8a62f2
SHA1

c410c3ca1e96ae5603205eaf3d25b476db3fc02a
SHA256

87b1a7b6a4d2b17ad192a46d2eb2390a6968980ae0ed2fef2b2d1864784960a7
SHA512

869a345c529b3b36db864b0721adb937153c2d3169c95f9e7c221560e099d84ed970194bea26b3c3a1e9b27a32140257b26d67bb3c99bcc929d03f4b94dcf921
SSDEEP

3072:Dbo5PCh7i5jU3QgLZrI+3SaVO/eQEci6PNIm7/BlihCtaYK:IJ6SXFeQhlbrSh

Score

N/A

Malware Config

Signatures

Files

87b1a7b6a4d2b17ad192a46d2eb2390a6968980ae0ed2fef2b2d1864784960a7
.exe windows x86

d0efdc9be20da3959be2ab06e0edfaba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
DeleteObject
Escape
ExtTextOutW
GetClipBox
GetDeviceCaps
GetStockObject
OffsetViewportOrgEx
RectVisible
CreatePen
ScaleViewportExtEx
ScaleWindowExtEx
SelectObject
SetBkColor
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutW
SaveDC
CreateBitmap

comctl32

ord17

kernel32

CloseHandle
CreateFileW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleWindow
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcAddress
GetProcessVersion
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersion
GetVersionExA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
IsBadHugeReadPtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
LocalReAlloc
MultiByteToWideChar
OpenProcess
Process32FirstW
Process32NextW
RaiseException
RtlUnwind
SetCommBreak
SetErrorMode
SetHandleCount
SetInformationJobObject
SetLastError
SetSystemTimeAdjustment
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
WinExec
WriteFile
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW

shell32

SHGetFolderLocation

user32

AdjustWindowRectEx
CallNextHookEx
CharNextExA
CheckMenuItem
CreateWindowExW
DdeCreateDataHandle
DdeGetData
DestroyCursor
DestroyMenu
DestroyWindow
DispatchMessageW
DrawFocusRect
DrawTextW
EnableMenuItem
EnableWindow
GetCapture
GetClassInfoW
GetClassNameW
GetClientRect
GetDC
GetDesktopWindow
GetDlgItem
GetForegroundWindow
GetKBCodePage
GetKeyState
GetLastActivePopup
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessagePos
GetMessageTime
GetNextDlgTabItem
GetParent
GetPropW
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetWindowLongW
GetWindowPlacement
GetWindowRect
GrayStringW
IsIconic
IsWindowEnabled
LoadBitmapW
LoadCursorW
LoadStringW
MapWindowPoints
MessageBoxW
ModifyMenuW
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterWindowMessageW
ReleaseDC
SendMessageW
SetFocus
SetForegroundWindow
SetMenuInfo
SetMenuItemBitmaps
SetPropW
SetUserObjectSecurity
SetWindowLongW
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowScrollBar
SystemParametersInfoW
TabbedTextOutW
TileWindows
UnhookWindowsHook
UnhookWindowsHookEx
UnregisterClassW
WINNLSGetEnableStatus
WinHelpW
WindowFromPoint

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

Exports

Exports

BrowseForFolderW
GetChecksum
HrEditPhonebookEntry
PszScanToCharA

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0efdc9be20da3959be2ab06e0edfaba

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

comctl32

kernel32

shell32

user32

winspool.drv

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 76KB - Virtual size: 76KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 76KB - Virtual size: 76KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 5KB - Virtual size: 5KB