e6f2bb24322f8f6e10df28877566c5f92bf394e910d8d5137d9093971aed6ee0

Sharing

Copy URL

Twitter E-mail

General

Target

e6f2bb24322f8f6e10df28877566c5f92bf394e910d8d5137d9093971aed6ee0
Size

622KB
MD5

14a739f89275208c3c17bd4c31db5dfd
SHA1

2f399eaddb209b4472c871796044bc9a7e06bdde
SHA256

e6f2bb24322f8f6e10df28877566c5f92bf394e910d8d5137d9093971aed6ee0
SHA512

54aa5c16c1997f20b1b50a9a87572459458627e267ff837c0b675a2bb6a63bb848b624f59e91c4377316ee2d6d1f10fb10a29fd2c1613332f1bd969b3ed89101
SSDEEP

12288:v4DlCawBXpxhno5DO9peqSQlxh8BtJDc64KBtmjfEcz8Rez0i:v4DMaOXpo5DUp6Qpet264KBtmjfEcowf

Score

N/A

Malware Config

Signatures

Files

e6f2bb24322f8f6e10df28877566c5f92bf394e910d8d5137d9093971aed6ee0
.exe windows x86

0a09088180ac50e694940fdc3006f2c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
GetTickCount
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetOEMCP
GetCPInfo
SetErrorMode
GetFullPathNameA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GlobalFlags
lstrcatA
WritePrivateProfileStringA
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
FreeResource
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalDeleteAtom
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetSystemTimeAsFileTime
GetModuleHandleA
GetModuleFileNameA
DeviceIoControl
GetFileSize
ReadFile
lstrcpyA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
WriteFile
MoveFileA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetFileAttributesA
CopyFileA
MoveFileExA
GetCurrentDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
CreateEventA
CreateProcessA
WaitForSingleObject
GetShortPathNameA
MultiByteToWideChar
GetVolumeInformationA
OpenMutexA
GetSystemTime
CreateFileA
SystemTimeToFileTime
SetFileTime
GetVersionExA
CloseHandle
FindFirstFileA
SetFileAttributesA
DeleteFileA
FindNextFileA
GetLastError
FindClose
GetEnvironmentVariableA
GetFileType
CreateDirectoryA

user32

RegisterClipboardFormatA
CreateDialogIndirectParamA
EndDialog
DestroyMenu
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
SetRect
IsRectEmpty
CharNextA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
IsWindow
IsChild
SetActiveWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
CopyRect
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
CharUpperA
GetSystemMetrics
GetClientRect
GetForegroundWindow
wsprintfA
GetSubMenu
GetMenuItemCount
GetMenuItemID
DrawTextA
TabbedTextOutA
GetDlgCtrlID
GetWindowRect
PtInRect
SetWindowTextA
GetClassNameA
GetDesktopWindow
ReleaseCapture
GetCapture
SetCapture
ClientToScreen
GetWindowTextA
UnhookWindowsHookEx
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDlgItem
SetMenuItemBitmaps
GetFocus
ModifyMenuA
PostThreadMessageA
SystemParametersInfoA
GetMenuState
PostMessageA
PostQuitMessage
SetCursor
SendMessageA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
MessageBoxA
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem

gdi32

GetMapMode
GetRgnBox
CreateRectRgnIndirect
GetTextColor
GetBkColor
GetStockObject
DeleteDC
ExtSelectClipRgn
OffsetViewportOrgEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
GetDeviceCaps
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetObjectA
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
SetViewportExtEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetKeySecurity
RegSetValueA
RegNotifyChangeKeyValue
RegQueryValueA
RegEnumKeyA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegQueryInfoKeyA

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
StgOpenStorageOnILockBytes
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
VariantInit
OleCreateFontIndirect

setupapi

SetupIterateCabinetA

Sections

.text
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 336KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a09088180ac50e694940fdc3006f2c0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

setupapi

Sections

.text Size: 220KB - Virtual size: 217KB

.rdata Size: 52KB - Virtual size: 48KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 336KB - Virtual size: 334KB

.text
Size: 220KB - Virtual size: 217KB

.rdata
Size: 52KB - Virtual size: 48KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 336KB - Virtual size: 334KB