5b0b545a1bcbd5363b76a24d1bd5439514cd14705cd1a870a228f58a45ec35c8

Sharing

Copy URL Twitter E-mail

General

Target

5b0b545a1bcbd5363b76a24d1bd5439514cd14705cd1a870a228f58a45ec35c8
Size

246KB
MD5

e7e094eceee9f81aab75240f99322f52
SHA1

3dc67bbca10182ccc21f93c247291caed903cc7c
SHA256

5b0b545a1bcbd5363b76a24d1bd5439514cd14705cd1a870a228f58a45ec35c8
SHA512

e24a2323a58ac514df85dd8821d6ffc4b0e81d7d923b85c18907458ed3d0ec19e3b0e85409273b824d1b86c78fba6d76b14101d93a66423130c9457fa48a8af4
SSDEEP

3072:Gpw9UaX3E5rUqVwdHLBLCrVYX8QPjYT5OGa1h2CWB/6RVV951D2W24ndKe7edhgL:lL3fqQtuysEYT+xv1Cp92R1A

Score

N/A

Malware Config

Signatures

Files

5b0b545a1bcbd5363b76a24d1bd5439514cd14705cd1a870a228f58a45ec35c8
.exe windows x86

581f343f368565e2f080283f59ff3a94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
AdjustWindowRectEx
CallNextHookEx
CallWindowProcA
CharUpperA
CheckMenuItem
ClientToScreen
CopyRect
CreateDialogIndirectParamA
CreateWindowExA
DdeEnableCallback
DefWindowProcA
DestroyMenu
DestroyWindow
DispatchMessageA
DrawIcon
DrawTextA
EnableMenuItem
EnableWindow
EndDialog
EndPaint
ExitWindowsEx
GetActiveWindow
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDlgCtrlID
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetLastActivePopup
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessageA
GetMessagePos
GetMessageTime
GetNextDlgTabItem
GetParent
GetPropA
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
wsprintfA
WinHelpA
ValidateRect
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TabbedTextOutA
SystemParametersInfoA
ShowWindow
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetPropA
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetActiveWindow
SendMessageA
SendDlgItemMessageA
RemovePropA
ReleaseDC
RegisterWindowMessageA
RegisterClassA
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
ModifyMenuA
MessageBoxA
MapWindowPoints
LoadStringA
LoadIconA
LoadCursorA
LoadBitmapA
IsWindowVisible
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
GrayStringA
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindow
GetTopWindow

advapi32

AddAccessDeniedAceEx
ElfCloseEventLog
ElfOldestRecord
GetAclInformation
LockServiceDatabase
LsaEnumeratePrivileges
LsaICLookupNamesWithCreds
MSChapSrvChangePassword
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
SystemFunction016
SystemFunction030
AddUsersToEncryptedFile

gdi32

PtInRegion
OffsetViewportOrgEx
GetStockObject
GetRelAbs
GetObjectA
GetDeviceCaps
GetDCPenColor
GetClipBox
PtVisible
ExtTextOutA
Escape
EnumEnhMetaFile
DeleteObject
DeleteDC
CreateEllipticRgn
CreateDIBitmap
CreateBitmap
RectVisible
RestoreDC
RoundRect
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectObject
SetBkColor
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutA
GdiPlayDCScript
gdiPlaySpoolStream

kernel32

FlushInstructionCache
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WritePrivateProfileStringA
WriteFile
WideCharToMultiByte
VirtualFree
VirtualAlloc
UnlockFile
UnhandledExceptionFilter
Toolhelp32ReadProcessMemory
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
Sleep
SetUnhandledExceptionFilter
SetTimeZoneInformation
SetSystemTime
SetStdHandle
SetLastError
SetHandleCount
SetFileTime
SetFilePointer
SetFileAttributesA
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
SetCurrentDirectoryA
SetConsoleTextAttribute
SetConsoleScreenBufferSize
SetConsoleCursorPosition
SetConsoleCursorInfo
RtlUnwind
ReleaseActCtx
ReadProcessMemory
ReadFile
RaiseException
MultiByteToWideChar
MulDiv
MapUserPhysicalPages
LockResource
LockFile
LocalUnlock
LocalReAlloc
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsDebuggerPresent
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InitializeSListHead
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetVersion
GetTimeZoneInformation
GetThreadLocale
GetSystemDirectoryA
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessVersion
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
Beep
ClearCommError
CloseHandle
CompareStringA
CompareStringW
CreateFileA
DeleteCriticalSection
DeleteFileA
DosDateTimeToFileTime
DuplicateHandle
EnterCriticalSection
ExitProcess
FatalExit
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLastError

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

581f343f368565e2f080283f59ff3a94

Headers

File Characteristics

Imports

user32

advapi32

gdi32

kernel32

comdlg32

winspool.drv

Sections

.text Size: 170KB - Virtual size: 170KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 32KB - Virtual size: 35KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 170KB - Virtual size: 170KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 32KB - Virtual size: 35KB

.rsrc
Size: 27KB - Virtual size: 27KB