774cc0901a8b7f225e7f87f3719eb7147573d0c6dfca34e9a08e08936167aae9

Sharing

Copy URL Twitter E-mail

General

Target

774cc0901a8b7f225e7f87f3719eb7147573d0c6dfca34e9a08e08936167aae9
Size

342KB
MD5

b0a3eac24e0c2f74368dea04d1cdee7d
SHA1

e3735ff322f3254d6c2a2f6ff999d76b0722b877
SHA256

774cc0901a8b7f225e7f87f3719eb7147573d0c6dfca34e9a08e08936167aae9
SHA512

7ef13bebeccd6134a4573cf02ba58db005857b67bb3fbb40b393d30fdbe899055eaaac488026658688060f7894ded77ad4d4101dbc409bac672e948890eed2d0
SSDEEP

6144:tC+uLI5Bq6SQHRjhPlffFpXZ1zubcejrJQ7ApU552075e4MYe85G3LAuxBx6yioH:t+M5BHPdbpGRpU5fTMY55G7Jf6y54Ru/

Score

N/A

Malware Config

Signatures

Files

774cc0901a8b7f225e7f87f3719eb7147573d0c6dfca34e9a08e08936167aae9
.exe windows x86

f9ce6b341bae222cdb97f8235afa629f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDeferWindowPos
SetDlgItemTextA
GetSysColor
GetLastActivePopup
IsChild
IsIconic
GetWindowPlacement
WindowFromPoint
EnumChildWindows
MoveWindow
SetWindowPlacement
SetParent
ChildWindowFromPointEx
CreateWindowExA
DispatchMessageA
GetClipboardData
SetWindowTextA
IsWindowVisible

gdi32

Chord
CreateDiscardableBitmap
EndPage
EqualRgn
CreateDCA
GdiComment
DrawEscape
GetBitmapDimensionEx
CreateSolidBrush
Arc
DeleteMetaFile
FloodFill
AddFontResourceA
CreateFontA
CreateCompatibleBitmap

advapi32

RegOpenKeyA
RegConnectRegistryA
ClearEventLogW
RegDeleteValueA
RegSetValueExA
RegSetValueA
RegisterEventSourceW
ReadEventLogA
RegEnumValueA
RegSaveKeyA
RegQueryInfoKeyA

kernel32

GlobalReAlloc
VirtualAlloc
HeapSize
LocalAlloc
HeapWalk
GlobalUnlock
GetStartupInfoA
InitializeCriticalSection
SetThreadLocale
HeapLock
OpenEventA
WritePrivateProfileStringA
GetProcAddress
GetExitCodeThread
CloseHandle
VirtualAllocEx
GetModuleHandleA
OpenMutexA

winspool.drv

EnumPrinterDriversW
GetPrinterW
AddPrintProcessorW
SetPrinterA
EnumJobsW
AddPrinterDriverW
AddPrinterDriverA
GetJobA
EnumPrintProcessorsA
DeletePrinterConnectionA

netapi32

NetGetJoinInformation
NetServerComputerNameDel
NetLocalGroupDelMembers
NetConfigGet
NetConnectionEnum
NetAuditWrite
NetGroupAddUser
NetErrorLogRead
NetAuditClear
NetAuditRead
NetErrorLogClear
NetErrorLogWrite
NetGetJoinableOUs

msvcrt

__p__fmode
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9ce6b341bae222cdb97f8235afa629f

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

msvcrt

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 320KB - Virtual size: 425KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 320KB - Virtual size: 425KB

.rsrc
Size: 4KB - Virtual size: 3KB