b9d39515b940c8a4a028da23ef71d34a6c33856bc74339f37170e420c89af61e

Sharing

Copy URL Twitter E-mail

General

Target

b9d39515b940c8a4a028da23ef71d34a6c33856bc74339f37170e420c89af61e
Size

203KB
MD5

3ff5c07cddd69fd606009b4bd3b04978
SHA1

a1a934e90498e5ecdc7f449d110acd203e1e4d56
SHA256

b9d39515b940c8a4a028da23ef71d34a6c33856bc74339f37170e420c89af61e
SHA512

3e14af14a67d9e475532e81e4e2cba7c3b9e982c664ca912fe9713667a544085594c4e63a2efff2a372eb3e295665e21ffcbf48c0d0b4917218f4c8450f37c57
SSDEEP

3072:2GWFirr+FKs/VhzlqxV2UkmOSOzh4a5FvedubkwLfLyHL9ti9DolwsdQ5UCw2nR:2Jinnsjpqx3chbF6ubP7LyHWolwEGR

Score

N/A

Malware Config

Signatures

Files

b9d39515b940c8a4a028da23ef71d34a6c33856bc74339f37170e420c89af61e
.exe windows x86

4f2d904db766bfccceed96bd876efc9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
ReleaseCapture
IsIconic
SetWindowPlacement
CloseClipboard
GetDlgItemTextW
RegisterClassExW
GetKeyboardLayout
MessageBoxW
CharNextW
DialogBoxParamW
UnhookWinEvent
SetCursor
GetSystemMenu
ScreenToClient
DrawTextExW
GetSysColorBrush
GetWindowThreadProcessId
LoadIconW
SetWinEventHook
KillTimer
ChildWindowFromPoint
GetScrollInfo
GetPropW
GetDesktopWindow
SetWindowTextW
GetWindowLongW
SendDlgItemMessageW
CreateWindowExW
EndDialog
TranslateMessage
wsprintfW
GetMenu
WinHelpW
CheckMenuItem
WindowFromPoint
UpdateWindow
OpenClipboard
DispatchMessageA
LoadImageW
GetClientRect
CharUpperW
GetCursorPos
LoadStringW
GetForegroundWindow
GetMenuState
GetWindowTextLengthW
CharLowerW
GetWindowPlacement
PostQuitMessage
EnableMenuItem
GetSubMenu
PeekMessageW
IsChild
MoveWindow
MessageBeep
GetParent
SetDlgItemTextW
LoadCursorW
GetWindowDC
IsDialogMessageW
InvalidateRect
GetDlgCtrlID
GetDlgItem
GetDC
GetSystemMetrics
CreateDialogParamW
LoadAcceleratorsW
ShowWindow
SetParent
PostMessageW
DestroyWindow
SetWindowLongW
GetWindowTextW
GetWindowRect
SetScrollPos
IsClipboardFormatAvailable
SendMessageW
RegisterWindowMessageW
TranslateAcceleratorW
DefWindowProcW
GetMessageW
EnableWindow
DispatchMessageW
ReleaseDC
GetFocus
GetLastActivePopup
SetActiveWindow

kernel32

SetFileAttributesW
LocalUnlock
FindFirstFileW
WriteConsoleW
LoadLibraryA
CreateFileW
SetFilePointer
HeapReAlloc
VirtualProtect
LoadLibraryW
GetCommandLineW
GetFileTime
lstrcpynW
VirtualQuery
UnhandledExceptionFilter
GetUserDefaultUILanguage
LCMapStringA
lstrcmpW
GetTickCount
SetUnhandledExceptionFilter
lstrcpynA
GetProcessHeap
CompareStringA
MapViewOfFile
CloseHandle
GetDateFormatW
Sleep
GetStdHandle
InterlockedIncrement
DuplicateHandle
SetEvent
GetFileType
DeleteCriticalSection
LockResource
SetConsoleCtrlHandler
InterlockedExchange
GetDriveTypeW
GetFileAttributesW
lstrcatW
HeapCreate
GetCommandLineA
GetCurrentThreadId
GetVersionExA
LocalReAlloc
GlobalLock
lstrcpyW
TlsGetValue
GetLocalTime
TlsFree
ReadFile
FindFirstFileA
GetFileInformationByHandle
lstrcmpiW
SizeofResource
DeleteFileW
RaiseException
WideCharToMultiByte
GetModuleHandleA
GetFileSize
GetLastError
LocalSize
LocalFree
SetLastError
LeaveCriticalSection
CreateFileA
SetEndOfFile
QueryPerformanceCounter
GetTimeZoneInformation
FindNextFileA
IsDebuggerPresent
LocalLock
GetCurrentProcess
GetProcAddress
GetSystemTimeAsFileTime
RtlUnwind
IsDBCSLeadByte
GetLocaleInfoW
LocalAlloc
GetUserDefaultLCID
CompareStringW
MoveFileW
FoldStringW
GetEnvironmentStrings
GetSystemInfo
CreateFileMappingW
GetCurrentProcessId
GlobalFree
FindClose
DeleteFileA
TlsSetValue
HeapFree
UnmapViewOfFile
HeapSize
lstrlenW
TerminateProcess
MultiByteToWideChar
MulDiv
OpenMutexA
GetStartupInfoA
GetTimeFormatW
ExitProcess
FreeLibrary
ExitThread
WriteFile
FormatMessageW
GetACP
GlobalUnlock

msvcrt

localtime
_unlock
malloc
wcsncpy
__p__commode
__set_app_type
wcsncmp
_exit
exit
_initterm
iswctype
time
_wtol
_c_exit
__setusermatherr
strchr
_purecall
_controlfp
_XcptFilter
__p__fmode
_adjust_fdiv
_vsnwprintf
_snwprintf
_cexit
memset
__getmainargs
_acmdln
??1type_info@@UAE@XZ

comdlg32

PrintDlgExW
GetOpenFileNameW
GetSaveFileNameW
ReplaceTextW
GetFileTitleW
FindTextW
PageSetupDlgW
ChooseFontW
CommDlgExtendedError

advapi32

RegQueryValueExA
RegQueryValueExW
RegCloseKey
IsTextUnicode
RegCreateKeyW
RegSetValueExW
RegOpenKeyExA

gdi32

TextOutW
LPtoDP
DeleteObject
EndDoc
GetTextExtentPoint32W
EnumFontsW
GetTextMetricsW
GetTextFaceW
SetAbortProc
CreateDCW
SelectObject
SetWindowExtEx
CreateFontIndirectW
StartDocW
StartPage
SetViewportExtEx
AbortDoc
EndPage
GetObjectW
SetBkMode
GetStockObject
SetMapMode
DeleteDC
GetDeviceCaps

winspool.drv

OpenPrinterW
GetPrinterDriverW
ClosePrinter

comctl32

CreateStatusWindowW

shell32

DragFinish
DragAcceptFiles
ShellAboutW
DragQueryFileW

Sections

.text
Size: 1024B - Virtual size: 895B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f2d904db766bfccceed96bd876efc9b

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

comdlg32

advapi32

gdi32

winspool.drv

comctl32

shell32

Sections

.text Size: 1024B - Virtual size: 895B

.rdata Size: 185KB - Virtual size: 184KB

.data Size: 26KB - Virtual size: 1.0MB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 1024B - Virtual size: 895B

.rdata
Size: 185KB - Virtual size: 184KB

.data
Size: 26KB - Virtual size: 1.0MB

.rsrc
Size: 5KB - Virtual size: 5KB