98d426299c2def80375690bec4bbed533e244a41824ce2b33c7d37ed3846acca

Sharing

Copy URL Twitter E-mail

General

Target

98d426299c2def80375690bec4bbed533e244a41824ce2b33c7d37ed3846acca
Size

564KB
MD5

fb62b37a312cb54e6eacb1593fb44c9b
SHA1

23f68e58975544098a48cc72e5a08ad600ed1651
SHA256

98d426299c2def80375690bec4bbed533e244a41824ce2b33c7d37ed3846acca
SHA512

6cbd19fc1a408725c8f0f2fccccb481829f2b4311498e6be4fd5acdec74e1603dd44e26f22b066dd93207b7241a0712609558ed48bcbe924c68e9a7fa3fe104c
SSDEEP

12288:MbX84T6d/Dh7/X4+XUUN38Lor8hDDQv9cBpTblM6GIEg6:MbX85/Dh7443qTq9cTTblM6GB

Score

N/A

Malware Config

Signatures

Files

98d426299c2def80375690bec4bbed533e244a41824ce2b33c7d37ed3846acca
.exe windows x86

909546cb1a0de42fbb72c9b86f117995

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
GetACP
GetEnvironmentVariableA
ExitProcess
HeapReAlloc
GetTimeZoneInformation
VirtualFree
VirtualAlloc
IsBadWritePtr
Sleep
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
GetVersionExA
HeapDestroy
UnhandledExceptionFilter
HeapCreate
LCMapStringA
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
FindFirstFileA
GetFullPathNameA
DuplicateHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
RaiseException
GetCommandLineA
GetStartupInfoA
HeapFree
RtlUnwind
HeapAlloc
GetFileAttributesA
GetFileTime
GetFileSize
FileTimeToSystemTime
GetTickCount
FileTimeToLocalFileTime
LCMapStringW
SetUnhandledExceptionFilter
GetVolumeInformationA
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
WritePrivateProfileStringA
GetLastError
GetPrivateProfileStringA
CreateDirectoryA
GetComputerNameA
DeleteFileA
SetEndOfFile
FindClose
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
GetUserDefaultLCID
IsBadReadPtr
GetCurrentProcess
InterlockedExchange
FindNextFileA
GetDriveTypeA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetErrorMode
GetThreadLocale
GetProcessVersion
GetOEMCP
GetCPInfo
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
lstrcpynA
GlobalFlags
MulDiv
SetLastError
GetCurrentThread
CloseHandle
GlobalAlloc
LocalFree
lstrcmpA
FormatMessageA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
IsBadCodePtr
InterlockedDecrement
SetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetTempPathA
GetModuleFileNameA

user32

CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
DestroyMenu
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetDC
ReleaseDC
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
PostMessageA
UpdateWindow
SendDlgItemMessageA
PeekMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
IsDialogMessageA
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetFocus
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
GetWindowRect
LoadIconA
GetSysColorBrush
EnableWindow
GetSysColor
MapWindowPoints
GetCursorPos
UnregisterClassA

gdi32

DeleteObject
GetWindowExtEx
GetViewportExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
GetBkColor
DPtoLP
GetTextColor
GetMapMode
LPtoDP
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
GetStockObject
RestoreDC
SaveDC
SelectObject
GetObjectA
SetBkColor
CreateBitmap
GetClipBox
SetTextColor
CreateDCA
GetDeviceCaps
DeleteDC

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

GetPrinterDataA
GetPrinterDriverA
ClosePrinter
OpenPrinterA
EnumPrintersA
EndDocPrinter
EndPagePrinter
WritePrinter
StartPagePrinter
StartDocPrinterA
DocumentPropertiesA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA

shell32

SHGetSpecialFolderPathA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoTaskMemAlloc
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemFree
StgCreateDocfileOnILockBytes

olepro32

ord253

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

909546cb1a0de42fbb72c9b86f117995

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

Sections

.text Size: 368KB - Virtual size: 367KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 28KB - Virtual size: 43KB

Size: 64KB - Virtual size: 61KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 368KB - Virtual size: 367KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 28KB - Virtual size: 43KB

.rsrc
Size: 16KB - Virtual size: 14KB