c5ef8d9e0526df8cc82df6c959604ebbd94e5ed336bb751c489834b952c2403c

Sharing

Copy URL Twitter E-mail

General

Target

c5ef8d9e0526df8cc82df6c959604ebbd94e5ed336bb751c489834b952c2403c
Size

276KB
MD5

5264e6485cf312dbb1827107bd80e1aa
SHA1

c6833322594298c2474dd213359dc98b4181fa22
SHA256

c5ef8d9e0526df8cc82df6c959604ebbd94e5ed336bb751c489834b952c2403c
SHA512

fcf245f0459f1ea4a0781254ea1a5c21c881d96d0dff4f62642024bc8ffc02e3251dc865f910247d10958524e3d2fe44608c63c48b17ee529a97fbd350787da3
SSDEEP

6144:KJlz0XwIQUQs88uBlBvxfGMpE1k81T/fGK+1ApbvYfL7G:KsiTSgCkMT/fGR1Apv

Score

N/A

Malware Config

Signatures

Files

c5ef8d9e0526df8cc82df6c959604ebbd94e5ed336bb751c489834b952c2403c
.exe windows x86

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

ord8

olepro32

ord253

ole32

CreateILockBytesOnHGlobal
CoTaskMemFree
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromCLSID
CoTaskMemAlloc

comdlg32

ChooseColorA
ChooseFontA
ChooseFontW
GetOpenFileNameA
GetFileTitleA
FindTextW
FindTextA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comctl32

ord17

user32

TabbedTextOutA
ShowWindow
SetWindowsHookExA
SetWindowTextA
SetWindowLongA
SetWindowContextHelpId
SetRect
SetPropA
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetActiveWindow
SendMessageA
SendDlgItemMessageA
RemovePropA
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostThreadMessageA
PostQuitMessage
PostMessageA
OffsetRect
MoveWindow
ModifyMenuA
MessageBoxA
MessageBeep
MapWindowPoints
MapDialogRect
LoadStringA
LoadIconA
IsWindowVisible
IsWindow
IsIconic
IsDialogMessageA
IsChild
GrayStringA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
TranslateMessage
GetTopWindow
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropA
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageTime
GetMessagePos
GetMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetCursorPos
GetCursor
GetClassNameA
GetClassLongA
GetCapture
EndDialog
EnableWindow
DestroyWindow
DestroyMenu
DefWindowProcA
CreateWindowExA
CreateDialogIndirectParamA
CopyRect
CopyAcceleratorTableA
ClientToScreen
CheckMenuItem
CharUpperA
CharNextA
CallWindowProcA
CallNextHookEx
AdjustWindowRectEx
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
ValidateRect
WinHelpA
wsprintfA
GetWindow

oleaut32

VariantCopy
VariantClear
VariantChangeType
VarBstrFromDate
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
VariantTimeToSystemTime

kernel32

lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrlenW
lstrlenA
lstrcatA
WritePrivateProfileStringA
WriteFile
WinExec
WideCharToMultiByte
VirtualFree
VirtualAlloc
UnlockFile
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MultiByteToWideChar
MulDiv
LockResource
LockFile
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVolumeInformationA
GetVersion
GetTimeZoneInformation
GetTickCount
GetTempPathA
GetTempFileNameA
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetShortPathNameA
GetProcessVersion
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFullPathNameA
GetFileType
GetFileTime
GetFileSize
GetFileAttributesA
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageA
FlushFileBuffers
FindResourceA
FindFirstFileA
FindClose
FileTimeToSystemTime
ExitProcess
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
CreateFileA
CompareStringW
CompareStringA
CloseHandle
FileTimeToLocalFileTime

gdi32

SetBkColor
SelectObject
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
Rectangle
RectVisible
PtVisible
OffsetViewportOrgEx
LPtoDP
SetMapMode
GetTextColor
GetStockObject
GetObjectA
GetMapMode
GetDeviceCaps
GetClipBox
GetBkColor
ExtTextOutA
ExtCreatePen
DeleteDC
DPtoLP
CreateBitmap
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutA
GetWindowExtEx

Sections

.text
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

Imports

oledlg

olepro32

ole32

comdlg32

advapi32

winspool.drv

comctl32

user32

oleaut32

kernel32

gdi32

Sections

.text Size: 54KB - Virtual size: 56KB

.rdata Size: 147KB - Virtual size: 148KB

.data Size: 36KB - Virtual size: 152KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 43KB - Virtual size: 43KB

.text
Size: 54KB - Virtual size: 56KB

.rdata
Size: 147KB - Virtual size: 148KB

.data
Size: 36KB - Virtual size: 152KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 43KB - Virtual size: 43KB