b17e5bdf9337b9b90dab5c47bdfacef6f843bdb4b311f9809896d47703fd3900

Sharing

Copy URL Twitter E-mail

General

Target

b17e5bdf9337b9b90dab5c47bdfacef6f843bdb4b311f9809896d47703fd3900
Size

153KB
MD5

f90c545ee9298045eb33cb0fa46ed688
SHA1

d9d010e9c712a43b8f8a15d105981da0fa5934c6
SHA256

b17e5bdf9337b9b90dab5c47bdfacef6f843bdb4b311f9809896d47703fd3900
SHA512

28430520412e3feeb4649bb4a1499c74efcb50607008f3544fc1af839106eefff77c40e9b04c440b10533d5e304a415f3c511bc4edb600f083153997b4041395
SSDEEP

3072:0SDmZb91t3pal7p6Uta9NmghGtm16mzjhCta2:P6r1t5OwLNm/tpmnhY

Score

N/A

Malware Config

Signatures

Files

b17e5bdf9337b9b90dab5c47bdfacef6f843bdb4b311f9809896d47703fd3900
.exe windows x86

d0efdc9be20da3959be2ab06e0edfaba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
DeleteObject
Escape
ExtTextOutW
GetClipBox
GetDeviceCaps
GetStockObject
OffsetViewportOrgEx
RectVisible
CreatePen
ScaleViewportExtEx
ScaleWindowExtEx
SelectObject
SetBkColor
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutW
SaveDC
CreateBitmap

comctl32

ord17

kernel32

CloseHandle
CreateFileW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleWindow
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcAddress
GetProcessVersion
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersion
GetVersionExA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
IsBadHugeReadPtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
LocalReAlloc
MultiByteToWideChar
OpenProcess
Process32FirstW
Process32NextW
RaiseException
RtlUnwind
SetCommBreak
SetErrorMode
SetHandleCount
SetInformationJobObject
SetLastError
SetSystemTimeAdjustment
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
WinExec
WriteFile
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW

shell32

SHGetFolderLocation

user32

AdjustWindowRectEx
CallNextHookEx
CharNextExA
CheckMenuItem
CreateWindowExW
DdeCreateDataHandle
DdeGetData
DestroyCursor
DestroyMenu
DestroyWindow
DispatchMessageW
DrawFocusRect
DrawTextW
EnableMenuItem
EnableWindow
GetCapture
GetClassInfoW
GetClassNameW
GetClientRect
GetDC
GetDesktopWindow
GetDlgItem
GetForegroundWindow
GetKBCodePage
GetKeyState
GetLastActivePopup
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessagePos
GetMessageTime
GetNextDlgTabItem
GetParent
GetPropW
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetWindowLongW
GetWindowPlacement
GetWindowRect
GrayStringW
IsIconic
IsWindowEnabled
LoadBitmapW
LoadCursorW
LoadStringW
MapWindowPoints
MessageBoxW
ModifyMenuW
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterWindowMessageW
ReleaseDC
SendMessageW
SetFocus
SetForegroundWindow
SetMenuInfo
SetMenuItemBitmaps
SetPropW
SetUserObjectSecurity
SetWindowLongW
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowScrollBar
SystemParametersInfoW
TabbedTextOutW
TileWindows
UnhookWindowsHook
UnhookWindowsHookEx
UnregisterClassW
WINNLSGetEnableStatus
WinHelpW
WindowFromPoint

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

Exports

Exports

HrGetMsgParam
PszDayFromIndex
RicheditStreamIn
SetQoSql

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0efdc9be20da3959be2ab06e0edfaba

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

comctl32

kernel32

shell32

user32

winspool.drv

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 86KB - Virtual size: 86KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 86KB - Virtual size: 86KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 5KB - Virtual size: 5KB