06ac6b8ce0216256c538290a1d4da1e68252f47a6ce85b37d1e4bf6336f75eba

Sharing

Copy URL Twitter E-mail

General

Target

06ac6b8ce0216256c538290a1d4da1e68252f47a6ce85b37d1e4bf6336f75eba
Size

343KB
MD5

3f9290418028ce35274b52be380e02ea
SHA1

22cece70b042f8e81467e727d81b7998dac8bc42
SHA256

06ac6b8ce0216256c538290a1d4da1e68252f47a6ce85b37d1e4bf6336f75eba
SHA512

68c2346599d9badf72bf806faeaa162c9d00d226bcf9f17255e5b2fcfb3288a3a7559713a84e528f8bf9a32b0045d8920bca56080ae363d2c9b982a1d18385b3
SSDEEP

6144:7f3dQBvi7+sSHSCsthcwTg+lWpgziGXqJ01ikdb1BcTNgCjI2pYO:7EYTCstTTZugziXJLQxBcjlpX

Score

N/A

Malware Config

Signatures

Files

06ac6b8ce0216256c538290a1d4da1e68252f47a6ce85b37d1e4bf6336f75eba
.exe windows x86

bec4674eee449b66b520fd5ef371df7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
BringWindowToTop
WindowFromPoint
FindWindowA
CreateDialogParamA
ShowWindow
GetDlgItemInt
GetDesktopWindow
IsChild
BeginDeferWindowPos
GetClipboardData
DefDlgProcA
GetWindowTextLengthA

gdi32

CreateFontA
DeleteObject
ExtFloodFill
CreateDiscardableBitmap
GetAspectRatioFilterEx
Chord
GetBitmapDimensionEx
AbortDoc
FillRgn
BitBlt

advapi32

ClearEventLogA
ReadEventLogW
PrivilegeCheck
RegNotifyChangeKeyValue
RegUnLoadKeyA
RegCreateKeyExA
RegOpenKeyExA
RegReplaceKeyA
RegDeleteKeyA
RegOpenKeyA
RegisterEventSourceA

kernel32

GetStringTypeW
SetLocaleInfoA
WaitForSingleObject
HeapValidate
HeapDestroy
HeapAlloc
GlobalSize
GetStartupInfoA
GetProcAddress
PulseEvent
VirtualAllocEx
GetModuleHandleA
WritePrivateProfileSectionA
MultiByteToWideChar
VirtualUnlock
LocalFree

winspool.drv

DeletePrinterDriverA
DeletePrinterConnectionW
GetJobA
DeletePrinterDriverExW
GetPrinterDriverA
AddPrintProcessorW
DeletePrinter
GetPrinterDriverW
AddPrintProcessorA

netapi32

NetServerTransportDel
NetConfigGetAll
NetGetJoinableOUs
NetErrorLogClear
NetGroupAdd
NetFileGetInfo
Netbios
NetGetAnyDCName
NetFileEnum
NetConfigSet

msvcrt

_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__mb_cur_max
_isctype
_pctype
__setusermatherr
__p__commode
__p__fmode
_controlfp
_except_handler3
__set_app_type

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.blr
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bec4674eee449b66b520fd5ef371df7c

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

msvcrt

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 101KB

.blr Size: 318KB - Virtual size: 318KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 101KB

.blr
Size: 318KB - Virtual size: 318KB

.rsrc
Size: 4KB - Virtual size: 4KB