878b3d1203937e3f84c430f37b21637707c42d2aee6cf2090698d95d549839d2

Sharing

Copy URL

Twitter E-mail

General

Target

878b3d1203937e3f84c430f37b21637707c42d2aee6cf2090698d95d549839d2
Size

147KB
MD5

6c84b8753f93645b2440d8eb04220c96
SHA1

db2a12023e8842b474d14f3bf7a09ddd2ced9ee7
SHA256

878b3d1203937e3f84c430f37b21637707c42d2aee6cf2090698d95d549839d2
SHA512

99dd5b7aefe535d701cbbd7f6a35b9adae3d692243d9f1db0576c2a12383386bfdb2b2a4391521bd831f5911d3682748eaea53e1bbe0dcdce30195a6b301e7b2
SSDEEP

3072:eQYldh6A7Q5+62i6ZoCog88cAaDIwxakqqo6R+VkxOJI:GldhhisuEHksV3

Score

N/A

Malware Config

Signatures

Files

878b3d1203937e3f84c430f37b21637707c42d2aee6cf2090698d95d549839d2
.exe windows x86

a4f56940a4975b79cb7adf4eca479c34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
HeapFree
HeapAlloc
RtlUnwind
TerminateProcess
GetStartupInfoA
GetCommandLineA
RaiseException
HeapReAlloc
HeapSize
GetACP
HeapDestroy
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCurrentProcess
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
MulDiv
lstrcpynA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetLastError
GetModuleFileNameA
GlobalAlloc
GetCurrentThread
LoadLibraryA
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
CreateThread
ResumeThread
lstrcmpA
CreateFileA
WriteFile
CloseHandle
lstrcpyA
GetSystemDirectoryA
lstrcatA
lstrlenA
Sleep
CreateMutexA
ReleaseMutex
InterlockedDecrement
GetLastError
HeapCreate
ExitProcess

user32

GrayStringA
LoadCursorA
GetSysColorBrush
DestroyMenu
ReleaseDC
ClientToScreen
PtInRect
GetClassNameA
LoadStringA
WaitMessage
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
IsDialogMessageA
DrawTextA
LoadIconA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
EnableWindow
MoveWindow
UnregisterClassA
SetWindowLongA
GetWindowLongA
SetTimer
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
TabbedTextOutA
GetDC
GetClassLongA
SetPropA
KillTimer
SendMessageA
IsWindowEnabled
GetDlgItem
GetParent
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
IsWindow
SetActiveWindow
GetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SetWindowTextA

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
DeleteDC
GetStockObject
GetDeviceCaps
SelectObject
DeleteObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

ord17

ole32

CoInitializeEx
CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance

oleaut32

VariantChangeType
VariantClear
VariantCopy
VariantInit
SysAllocString
SysStringLen
SysFreeString

wininet

HttpAddRequestHeadersA
InternetOpenA
InternetSetOptionA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile

wsock32

recvfrom
socket
WSAAsyncSelect
sendto
connect
WSAStartup
send
recv
gethostbyname
closesocket
htonl
htons
bind
ioctlsocket
accept
inet_ntoa
select
WSACleanup
WSASetLastError
WSAGetLastError

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a4f56940a4975b79cb7adf4eca479c34

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

wininet

wsock32

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 8KB - Virtual size: 28KB

.rsrc Size: 8KB - Virtual size: 8KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 8KB - Virtual size: 28KB

.rsrc
Size: 8KB - Virtual size: 8KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB