f686114dd24d84adf48e1dd88d3a6ce3d1a7fa97e93f3da916766419b6a2b70f

Sharing

Copy URL Twitter E-mail

General

Target

f686114dd24d84adf48e1dd88d3a6ce3d1a7fa97e93f3da916766419b6a2b70f
Size

724KB
MD5

27f7d8980bfdd678d67652e24f3201c0
SHA1

4237e31a34d0fcb9937a5edf139cd329ee4c8100
SHA256

f686114dd24d84adf48e1dd88d3a6ce3d1a7fa97e93f3da916766419b6a2b70f
SHA512

4cfb7832d0b9d9fcb1b817913109b87ae04a7c2b8275e6296d5520eafa48c9d58211b3dec5919ee2727e9a9a0ea23cd084c57909cb57ab3f7c118dc9183c6356
SSDEEP

12288:GkVZEqYEopAWXJcLGeM6wPoKAlOERt0pRyGEJ+yNwButE7MqJSsPdF:GS8EopA8cLlMhP80ERt0pEGEJ+yNWutU

Score

N/A

Malware Config

Signatures

Files

f686114dd24d84adf48e1dd88d3a6ce3d1a7fa97e93f3da916766419b6a2b70f
.exe windows x86

99338684f2d8d314c95fe9df8584850b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringW
GetTimeZoneInformation
GetACP
GetProfileStringA
HeapSize
ExitThread
CreateThread
TerminateProcess
RaiseException
SetEnvironmentVariableA
GetDriveTypeA
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapReAlloc
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesA
GetFullPathNameA
FindFirstFileA
FindClose
SetEndOfFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GetLastError
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
LocalFree
lstrcpynA
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
SetLastError
FindResourceA
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedIncrement
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
SizeofResource
LoadResource
LockResource
GetCurrentDirectoryA
GlobalLock
GlobalUnlock
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
DeleteFileA
InterlockedDecrement
GetFileSize
GlobalAlloc
ReadFile
WriteFile
CreateFileA
CloseHandle
GlobalFree
CompareStringA
GetLocaleInfoA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetTickCount
WaitForSingleObject
SetEvent
Sleep
ResetEvent
InitializeCriticalSection
MulDiv
LoadLibraryA
GetProcAddress
LCMapStringW
FreeLibrary

user32

DestroyMenu
PostThreadMessageA
GetSysColorBrush
LoadStringA
GetClassNameA
LoadCursorA
wvsprintfA
ShowWindow
MoveWindow
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
DefWindowProcA
GetMessageTime
GetForegroundWindow
SetForegroundWindow
SystemParametersInfoA
GetWindowPlacement
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
RegisterClipboardFormatA
WindowFromPoint
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
ValidateRect
LoadIconA
MessageBoxA
RedrawWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowVisible
GetLastActivePopup
IsWindowEnabled
SetCursor
PostQuitMessage
GetIconInfo
GetDlgCtrlID
SetWindowPos
SetWindowTextA
GetKeyState
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
FillRect
GetMessagePos
GetAsyncKeyState
CallWindowProcA
GetWindowLongA
SetWindowLongA
CharNextA
IsWindowUnicode
GetSysColor
GetWindowRect
SendMessageA
ReleaseDC
GetDC
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
InvalidateRect
ScreenToClient
GetCursorPos
EnableWindow
IsWindow
DrawFocusRect
CopyRect
GetFocus
OffsetRect
IntersectRect
PtInRect
SetRectEmpty
GetDlgItem
GetParent
PostMessageA
DrawTextA
InflateRect
MessageBeep
GetMenuItemCount
RegisterWindowMessageA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetWindow
MsgWaitForMultipleObjects
PeekMessageA

gdi32

LineTo
SetTextAlign
MoveToEx
CreatePen
PtVisible
TextOutA
Escape
DPtoLP
IntersectClipRect
ExcludeClipRect
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
GetDeviceCaps
ExtTextOutA
ExtCreatePen
SetTextColor
SetBkMode
RectVisible
SetBkColor
DeleteObject
GetClipBox
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
SelectObject
GetDIBits
CreateDIBSection
DeleteDC
CreateDIBitmap
GetTextExtentPointA
CreateRectRgnIndirect
CreateSolidBrush
SetGraphicsMode
CreateCompatibleBitmap
CreateCompatibleDC
CreateBitmap
GetNearestColor
PatBlt
BitBlt
Rectangle
GetBkColor
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
GetStockObject
GetObjectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

comctl32

ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_Draw
ImageList_GetBkColor
ImageList_Destroy
ImageList_LoadImageA
ord17

oledlg

ord8

ole32

OleIsCurrentClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleFlushClipboard

oleaut32

SysFreeString
VariantClear
SysAllocString

Sections

.text
Size: 456KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99338684f2d8d314c95fe9df8584850b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 456KB - Virtual size: 452KB

.rdata Size: 156KB - Virtual size: 154KB

.data Size: 52KB - Virtual size: 91KB

.rsrc Size: 56KB - Virtual size: 53KB

.text
Size: 456KB - Virtual size: 452KB

.rdata
Size: 156KB - Virtual size: 154KB

.data
Size: 52KB - Virtual size: 91KB

.rsrc
Size: 56KB - Virtual size: 53KB