67469b3b97f651024cbcc29098a3165c5d1c8ef850b3ae6eef93d0d7d39370ed

Sharing

Copy URL Twitter E-mail

General

Target

67469b3b97f651024cbcc29098a3165c5d1c8ef850b3ae6eef93d0d7d39370ed
Size

588KB
MD5

8381841ddefcb2f177d87a4075cc1436
SHA1

1ce4f587bf95daf1367f95a83b7e937043bf8ce7
SHA256

67469b3b97f651024cbcc29098a3165c5d1c8ef850b3ae6eef93d0d7d39370ed
SHA512

bd33fbc2eb32909d1ab5bb1cd68dd5fc69ce9b4e9737e228f2eccde141e531181220df1a8abcf85e3a443adfc68203c085b0a8db96a87687bd2abdf558134961
SSDEEP

12288:ff5p1FaRl02Hxq92zAmTai2tUf7JRFY/jH6Hf2U45:35DFaRl02RqRmeElHYjCf2P

Score

N/A

Malware Config

Signatures

Files

67469b3b97f651024cbcc29098a3165c5d1c8ef850b3ae6eef93d0d7d39370ed
.exe windows x86

986c2493e42aaa0b02edf16c07362083

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetHandleInformation
GetModuleHandleA
SetPriorityClass
GetFileType
CreateMutexW
LockResource
CompareStringW
SetHandleCount
lstrlenW
VirtualFree
LeaveCriticalSection
LoadLibraryExW
InterlockedCompareExchange
SetThreadPriority
lstrcpyA
CreateEventW
SetLastError
LocalFree
ExitThread
GetTempFileNameA
GetFileSize
LoadResource
CopyFileW
GetCurrentProcessId
HeapFree
GetThreadTimes
GetCurrentThread
SearchPathA
HeapAlloc
GlobalReAlloc
WideCharToMultiByte
CreateDirectoryW
lstrcmpiW
GetCurrentThreadId
lstrcmpiA
HeapSize
SetStdHandle
GetShortPathNameW
IsBadReadPtr
GetConsoleCP
CreateMutexA
LCMapStringA
SetFilePointer
LoadLibraryW
QueryPerformanceCounter
LocalAlloc
DeleteCriticalSection
GlobalFree
GetModuleHandleW
lstrcpyW
GetThreadLocale
SearchPathW
GetLastError
SuspendThread
GetACP
GetSystemTime
GetStartupInfoW
GetProcessHeap
ResumeThread
CloseHandle
GetTempFileNameW
GetConsoleMode
SetEnvironmentVariableA
GetModuleFileNameA
IsBadWritePtr
lstrcmpW
InterlockedIncrement
GlobalLock
InterlockedExchange
GetTickCount
FormatMessageA
ExitProcess
FreeLibrary
ResetEvent
GetShortPathNameA
CopyFileA
WriteFile
GetProcAddress
GlobalAlloc
CreateFileA
GetVersionExA
GetStringTypeW
IsValidLocale
GetTempPathA
lstrcpynW
VirtualQuery
CreateThread
GetSystemInfo
GetSystemTimeAsFileTime
WaitForSingleObject
WriteConsoleA
IsBadStringPtrW
UnmapViewOfFile
FileTimeToLocalFileTime
HeapDestroy
EnumSystemLocalesA
GetLocaleInfoW
SetEndOfFile
GetLocaleInfoA
GetVersion
GetVersionExW
GetStartupInfoA
CreateFileMappingW
GetStringTypeA
GetCPInfo
CompareStringA
WriteConsoleW
lstrcpynA
HeapReAlloc
CreateFileMappingA
GlobalHandle
HeapCreate
GetTempPathW
ReadFile
SystemTimeToFileTime
GetModuleFileNameW
ExpandEnvironmentStringsA
InitializeCriticalSection
Sleep
lstrcmpA
CreateEventA
GetTimeFormatA
LoadLibraryA
SetCurrentDirectoryW
LCMapStringW
GetCurrentDirectoryW
GetFileTime
InterlockedDecrement
lstrcatA
CreateFileW
SetEvent
SetCurrentDirectoryA
GetStdHandle
RaiseException
CreateDirectoryA
GetCurrentDirectoryA
GetLocalTime
MapViewOfFile
SetErrorMode
lstrlenA
GlobalUnlock
SizeofResource
IsValidCodePage
MultiByteToWideChar
GetOEMCP
FlushFileBuffers
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
DeleteFileA

user32

SendMessageA
SetForegroundWindow
EnableWindow
EndDialog
GetWindowRect
GetParent
IsWindow
LoadCursorA
InvalidateRect
LoadIconA
PeekMessageA
GetDlgItem
CharNextA
ShowWindow
PostQuitMessage
BeginPaint
GetFocus
GetSysColor
wsprintfA
DefWindowProcA
SetFocus
GetSystemMetrics
GetDesktopWindow
PostMessageA
GetWindowLongA
TranslateMessage
SetWindowTextA
MessageBoxA
DispatchMessageA
SendDlgItemMessageA
DestroyWindow
KillTimer
GetDC
SetCursor
SetWindowPos

winspool.drv

AbortPrinter
FreePrinterNotifyInfo
DeletePrinterConnectionA
SetJobA
EnumJobsA
DeletePrinter
SetPortA
ScheduleJob
AddMonitorA
EnumPrinterKeyA
FindNextPrinterChangeNotification
GetPrinterDataA
AdvancedDocumentPropertiesA
EnumPrinterDriversA
DeletePrintProcessorA
DeletePrinterDriverA
DeleteFormA
DeletePortA
OpenPrinterA
GetPrinterDriverDirectoryA
DeletePrinterDataExA
EndDocPrinter
StartPagePrinter
EnumPrinterDataA
FindClosePrinterChangeNotification
FindFirstPrinterChangeNotification
GetPrintProcessorDirectoryA
DeleteMonitorA
ConnectToPrinterDlg
GetPrinterDriverA
AddPrintProvidorA
SetPrinterDataExA
AddPrinterDriverExA
AddPrinterConnectionA
SetPrinterA
AddPrintProcessorA
AddPortA
DeletePrinterDataA
EndPagePrinter

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 520KB - Virtual size: 523KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

986c2493e42aaa0b02edf16c07362083

Headers

File Characteristics

Imports

kernel32

user32

winspool.drv

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 520KB - Virtual size: 523KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 520KB - Virtual size: 523KB