e9d6c98afd735dc2f032eb6579e89c200f70533ac4da7470b862b2b8491db940

Sharing

Copy URL

Twitter E-mail

General

Target

e9d6c98afd735dc2f032eb6579e89c200f70533ac4da7470b862b2b8491db940
Size

235KB
MD5

0b2fe8857369530d7d174eb7155c9260
SHA1

0d84ae40679d73ff75f305ad01a50a296f913b66
SHA256

e9d6c98afd735dc2f032eb6579e89c200f70533ac4da7470b862b2b8491db940
SHA512

e9fb57ccadd43947e49d30bcdbf67f315b3289aeea67bb92092a5ebd53b83a6a915def8a33caa1b684c6e176e13947fefd811f7426aa8d03febfd2ff3740b10d
SSDEEP

3072:AYU1p8nDO3v5ze7e6QMRK4x9pvgZu2Ff+b8IZnrVdb6LYDI+D4zQlsvzSIE2RyVb:A9NQ75QG3vgN+b8I9rX05zL

Score

N/A

Malware Config

Signatures

Files

e9d6c98afd735dc2f032eb6579e89c200f70533ac4da7470b862b2b8491db940
.exe windows x86

4f93ec81a3196637bff80ff2cb9b0893

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
SetWindowTextA
SetActiveWindow
LoadBitmapA
EnableMenuItem
GetClassNameA
DrawIcon
UpdateWindow
TranslateMessage
ValidateRect
PeekMessageA
GetWindowLongA
LoadCursorA
GetSubMenu
EndPaint
GetKeyState
GetCursorPos
GetMenuItemCount
GetActiveWindow
LoadStringA
CreateWindowExA
GetNextDlgTabItem
ShowWindow
SendDlgItemMessageA
ClientToScreen
GetWindowTextLengthA
LoadIconA
GetMenuState
PostQuitMessage
DispatchMessageA
CallWindowProcA
GetWindowRect
WinHelpA
SetWindowLongA
GetDC
GetParent
SystemParametersInfoA
DefWindowProcA
IsWindow
GetMenuCheckMarkDimensions
GetClassInfoA
GetFocus
GetMessageTime
GetDlgCtrlID
GetMenu
DestroyMenu
IsIconic
PtInRect
SetPropA
SetForegroundWindow
ReleaseDC
SetWindowsHookExA
GetMessageA
GetSysColorBrush
RegisterClassA
DrawTextA
GetCapture
PostMessageA
GetWindowPlacement
EnableWindow
AdjustWindowRectEx
GetLastActivePopup
GetMenuItemID
GetWindowTextA
BeginPaint
SendMessageA
SetWindowPos
GetSysColor
GetDlgItem
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
CopyRect
UnhookWindowsHookEx
RegisterWindowMessageA
SetMenuItemBitmaps
GrayStringA
UnregisterClassA
RemovePropA
SetCursor
GetClientRect
MessageBoxA
CheckMenuItem
CallNextHookEx
GetMessagePos
CharUpperA
IsDialogMessageA
ModifyMenuA
GetClassLongA
MapWindowPoints
ExitWindowsEx
TabbedTextOutA
SetFocus
EndDialog
GetWindow
GetForegroundWindow
IsWindowVisible
GetTopWindow
GetPropA
IsWindowEnabled

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA

gdi32

GetStockObject
RectVisible
GetClipBox
RestoreDC
TextOutA
SetTextColor
SetMapMode
SetBkColor
Escape
ScaleWindowExtEx
OffsetViewportOrgEx
PtVisible
SetViewportExtEx
GetObjectA
CreateBitmap
ScaleViewportExtEx
SaveDC
DeleteObject
DeleteDC
GetDeviceCaps
SelectObject
SetWindowExtEx
SetViewportOrgEx
ExtTextOutA

kernel32

GlobalHandle
GetOEMCP
GetModuleFileNameA
LoadResource
TlsSetValue
OutputDebugStringA
GlobalFree
FreeLibrary
GetVersionExA
SetEndOfFile
lstrcmpA
GetProcAddress
LocalFileTimeToFileTime
GetFileSize
GetEnvironmentStringsA
SetLastError
HeapAlloc
DuplicateHandle
DeleteFileA
FindNextFileA
lstrcmpiA
FindClose
TlsFree
GlobalUnlock
LeaveCriticalSection
GetCurrentProcess
GetVersion
HeapSize
GlobalAlloc
CompareStringA
LockResource
TlsAlloc
LocalAlloc
GlobalLock
SetStdHandle
GetSystemDirectoryA
SetCurrentDirectoryA
WriteFile
GlobalDeleteAtom
LCMapStringA
SetHandleCount
LoadLibraryA
GetVolumeInformationA
GetCurrentDirectoryA
GetStartupInfoA
GetACP
GetFileTime
GetCurrentThread
InitializeCriticalSection
GetStringTypeW
FileTimeToLocalFileTime
GlobalFindAtomA
MultiByteToWideChar
TlsGetValue
CreateFileA
VirtualFree
TerminateProcess
GetCommandLineA
ExitProcess
Sleep
GetWindowsDirectoryA
GlobalGetAtomNameA
UnlockFile
SetUnhandledExceptionFilter
DeleteCriticalSection
GetEnvironmentVariableA
GetFileAttributesA
MulDiv
HeapFree
LocalReAlloc
GetCurrentThreadId
InterlockedIncrement
WritePrivateProfileStringA
CloseHandle
VirtualAlloc
GetTimeZoneInformation
GetLastError
ReadFile
SetFileTime
SystemTimeToFileTime
GetStringTypeA
HeapDestroy
FindFirstFileA
WideCharToMultiByte
GetDriveTypeA
LCMapStringW
lstrcpyA
lstrcatA
SetFileAttributesA
GetFullPathNameA
CompareStringW
lstrlenA
IsBadWritePtr
GetStdHandle
FindResourceA
GlobalFlags
GetProcessVersion
SetEnvironmentVariableA
SetErrorMode
GlobalReAlloc
LocalFree
IsBadCodePtr
HeapReAlloc
FlushFileBuffers
GetFileType
HeapCreate
FreeEnvironmentStringsA
InterlockedDecrement
EnterCriticalSection
GlobalAddAtomA
IsBadReadPtr
GetModuleHandleA
GetEnvironmentStringsW
RtlUnwind
RaiseException
LockFile
UnhandledExceptionFilter
lstrcpynA
SetFilePointer
GetCPInfo
FreeEnvironmentStringsW
FileTimeToSystemTime

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f93ec81a3196637bff80ff2cb9b0893

Headers

File Characteristics

Imports

user32

advapi32

gdi32

kernel32

comdlg32

winspool.drv

Sections

.text Size: 163KB - Virtual size: 163KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 30KB - Virtual size: 30KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 163KB - Virtual size: 163KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 28KB - Virtual size: 28KB