f7dffe1aa8f6c1fcedafac09022dc902c2e30716ce77be38273e279b2872ceaf

Sharing

Copy URL Twitter E-mail

General

Target

f7dffe1aa8f6c1fcedafac09022dc902c2e30716ce77be38273e279b2872ceaf
Size

278KB
MD5

44dda3defc8fe376343dc1a6540cc496
SHA1

9efcafb22283ccb1f4f56b155e55cf8afe70e7e9
SHA256

f7dffe1aa8f6c1fcedafac09022dc902c2e30716ce77be38273e279b2872ceaf
SHA512

bfc4e31664bc75db70e0d0a3d37e26fa26cdbb7c6f19c5f18c292cccbb6c90f9a51e11d8340f3d777f89b03205c402b1365d4b9e23dfe3967e6bb49b85783c50
SSDEEP

3072:x6pI7mxceVGCRMvN4Y2Syp52ry3Apg11Txqh1GxDfXTgfe3RiZqMEjuS3bE6bikN:x+RGETF51LqDGLTgf2RHGk3G

Score

N/A

Malware Config

Signatures

Files

f7dffe1aa8f6c1fcedafac09022dc902c2e30716ce77be38273e279b2872ceaf
.exe windows x86

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

ord8

olepro32

ord253

ole32

CreateILockBytesOnHGlobal
CoTaskMemFree
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromCLSID
CoTaskMemAlloc

comdlg32

ChooseColorA
ChooseFontA
ChooseFontW
GetOpenFileNameA
GetFileTitleA
FindTextW
FindTextA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comctl32

ord17

user32

TabbedTextOutA
ShowWindow
SetWindowsHookExA
SetWindowTextA
SetWindowLongA
SetWindowContextHelpId
SetRect
SetPropA
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetActiveWindow
SendMessageA
SendDlgItemMessageA
RemovePropA
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostThreadMessageA
PostQuitMessage
PostMessageA
OffsetRect
MoveWindow
ModifyMenuA
MessageBoxA
MessageBeep
MapWindowPoints
MapDialogRect
LoadStringA
LoadIconA
IsWindowVisible
IsWindow
IsIconic
IsDialogMessageA
IsChild
GrayStringA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
TranslateMessage
GetTopWindow
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropA
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageTime
GetMessagePos
GetMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetCursorPos
GetCursor
GetClassNameA
GetClassLongA
GetCapture
EndDialog
EnableWindow
DestroyWindow
DestroyMenu
DefWindowProcA
CreateWindowExA
CreateDialogIndirectParamA
CopyRect
CopyAcceleratorTableA
ClientToScreen
CheckMenuItem
CharUpperA
CharNextA
CallWindowProcA
CallNextHookEx
AdjustWindowRectEx
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
ValidateRect
WinHelpA
wsprintfA
GetWindow

oleaut32

VariantCopy
VariantClear
VariantChangeType
VarBstrFromDate
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
VariantTimeToSystemTime

kernel32

lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrlenW
lstrlenA
lstrcatA
WritePrivateProfileStringA
WriteFile
WinExec
WideCharToMultiByte
VirtualFree
VirtualAlloc
UnlockFile
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MultiByteToWideChar
MulDiv
LockResource
LockFile
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVolumeInformationA
GetVersion
GetTimeZoneInformation
GetTickCount
GetTempPathA
GetTempFileNameA
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetShortPathNameA
GetProcessVersion
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFullPathNameA
GetFileType
GetFileTime
GetFileSize
GetFileAttributesA
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageA
FlushFileBuffers
FindResourceA
FindFirstFileA
FindClose
FileTimeToSystemTime
ExitProcess
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
CreateFileA
CompareStringW
CompareStringA
CloseHandle
FileTimeToLocalFileTime

gdi32

SetBkColor
SelectObject
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
Rectangle
RectVisible
PtVisible
OffsetViewportOrgEx
LPtoDP
SetMapMode
GetTextColor
GetStockObject
GetObjectA
GetMapMode
GetDeviceCaps
GetClipBox
GetBkColor
ExtTextOutA
ExtCreatePen
DeleteDC
DPtoLP
CreateBitmap
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutA
GetWindowExtEx

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

Imports

oledlg

olepro32

ole32

comdlg32

advapi32

winspool.drv

comctl32

user32

oleaut32

kernel32

gdi32

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 148KB - Virtual size: 148KB

.data Size: 33KB - Virtual size: 152KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 43KB - Virtual size: 43KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 148KB - Virtual size: 148KB

.data
Size: 33KB - Virtual size: 152KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 43KB - Virtual size: 43KB