92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b

Sharing

Copy URL

Twitter E-mail

General

Target

92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b
Size

341KB
MD5

e7f1e1844a13fbd461213f819c6d1f2a
SHA1

4b9acef686815297d9e5ae67a7fc06911b82e103
SHA256

92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b
SHA512

60298a1c06cc05732a1d091fc4f2c3ae3f8e6004008910bb71a757d9f6deae538af67b5a893fa9b8388f5bbc47b9573ef9125e97958fffd920b9f61e33d45a9b
SSDEEP

6144:X/i4AJyD+YMqErSZTRZkQpOnzCJvvN0+cLpNaoMvZ98KoJBmVvSG1ZqSyp:WJJqrOENUNFG98KomVRZqSC

Score

N/A

Malware Config

Signatures

Files

92cd482cb1d108db2bc1b4ea875b5487dabbe38d25693f5395eb92fbf183564b
.exe windows x86

35b2649d7286e1ba075da1f3407220d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxIndirectA
TranslateMessage
LoadIconA
GetNextDlgTabItem
OpenClipboard
EnumThreadWindows
SetClipboardData
GetClipboardData
DispatchMessageA
LoadCursorA
CloseWindow
GetWindowPlacement
GetLastActivePopup
DialogBoxParamA
AdjustWindowRectEx
DestroyWindow
SetSysColors
GetWindowRect
AnyPopup
EnumChildWindows
TileWindows
BringWindowToTop

gdi32

GetStockObject
CreateCompatibleDC
GdiGetBatchLimit
FloodFill
CreateCompatibleBitmap
CloseMetaFile
DeleteObject
GetAspectRatioFilterEx
AbortDoc
GetBitmapDimensionEx
CopyMetaFileA
CreateFontW
ExcludeClipRect

advapi32

OpenEventLogW
ClearEventLogA
OpenBackupEventLogW
ReportEventW
RegQueryInfoKeyA
RegisterEventSourceA
RegQueryMultipleValuesA
RegLoadKeyA
ReadEventLogA

shlwapi

PathFindExtensionW
StrSpnW
PathFindOnPathW
StrPBrkW
PathCompactPathExW
StrCmpNIA
PathIsSystemFolderA
StrToIntA
StrRChrIW
StrNCatA
PathCompactPathExA

kernel32

GetThreadLocale
LeaveCriticalSection
HeapFree
IsBadWritePtr
VirtualQuery
GetCPInfoExA
SetLocaleInfoA
HeapUnlock
GetStringTypeW
GetUserDefaultLangID
GlobalSize
WritePrivateProfileSectionA
GetStartupInfoA
GetProcAddress
GetLastError
GetEnvironmentStrings
GetStdHandle
LCMapStringA
GetACP
VirtualAllocEx
GetModuleHandleA
GetProfileStringA
HeapReAlloc
VerLanguageNameA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerFindFileA
VerInstallFileA

winspool.drv

GetJobW
AddPrintProcessorW
AddPrinterDriverExW
SetJobA
AddPrinterConnectionA
EnumPrinterDriversW
EnumJobsW
AddPrinterDriverW
GetPrinterA
DeleteFormA
DeletePrinterKeyA
DeletePrinterDriverExA
AddPrintProcessorA
DeletePrinterDataA
AddJobA

secur32

MakeSignature
ApplyControlToken
ExportSecurityContext
DeleteSecurityContext
VerifySignature
DecryptMessage
FreeCredentialsHandle
EncryptMessage
AcceptSecurityContext
CompleteAuthToken

netapi32

NetMessageNameDel
NetFileGetInfo
NetAuditWrite
NetGetJoinableOUs
NetConfigGet
NetFileEnum
Netbios
NetGetJoinInformation
NetGroupAdd
NetConfigGetAll
NetAuditClear
NetConfigSet
NetGetAnyDCName

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 315KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35b2649d7286e1ba075da1f3407220d2

Headers

File Characteristics

Imports

user32

gdi32

advapi32

shlwapi

kernel32

version

winspool.drv

secur32

netapi32

msvcrt

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 315KB - Virtual size: 418KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 315KB - Virtual size: 418KB

.rsrc
Size: 4KB - Virtual size: 3KB