b5130db65a1b0ead3674040403e9fe63e22179fa79f3ff68d3e675e9ab2e21db

Sharing

Copy URL Twitter E-mail

General

Target

b5130db65a1b0ead3674040403e9fe63e22179fa79f3ff68d3e675e9ab2e21db
Size

724KB
MD5

7daa69985036a71e9d6bf5182915b808
SHA1

5d5f097aecc21781e614dbed77cc2efcf43fb9f1
SHA256

b5130db65a1b0ead3674040403e9fe63e22179fa79f3ff68d3e675e9ab2e21db
SHA512

ad32e1d3cd3c5c8727ab280a30a910fa28afdd122a5dced94fbd5b62298215c7f77c4caf8de874eb038f7103c4b4cdc52a15663bf78e2ec5cbc82f03c1274f4e
SSDEEP

12288:l6Y+fh2cU/G7lRHX2qFY/75ryEC6VU0TRuQ/kHRbxs0pvfHtUJpDWB/rpY:lD+2cU/AlRHX2qY7IeTrkHRbxl9UJ5WJ

Score

N/A

Malware Config

Signatures

Files

b5130db65a1b0ead3674040403e9fe63e22179fa79f3ff68d3e675e9ab2e21db
.exe windows x86

f69c5533149dd66c42c2fa80d2f86a84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
ChooseColorW

gdi32

Ellipse
GetTextExtentPoint32W
Rectangle
AbortDoc
CreateDIBSection
CreateCompatibleBitmap
SelectObject
SetViewportExtEx
GetClipBox
CreateEllipticRgn
GetDIBits
CreateBitmap
CreateBrushIndirect
SetViewportOrgEx
ExtSelectClipRgn
GetRegionData
CreateRectRgnIndirect
CreateDCW
CreatePen
SetROP2
BitBlt
CreateSolidBrush
GetStockObject
TextOutW
SetBkColor
GetObjectW
GetBkColor
EnumFontFamiliesExW
DeleteObject
EqualRgn
RealizePalette
DeleteDC
SetPixel
RoundRect
Escape
DPtoLP
SetMapMode
StretchDIBits
IntersectClipRect
SetTextAlign
GetTextColor
ExtTextOutW
GetDeviceCaps
SetTextColor
CreateCompatibleDC
SetBkMode
MoveToEx
OffsetRgn
Polyline
EndPath
BeginPath
CreateRectRgn

kernel32

MultiByteToWideChar
GetCurrentThread
DuplicateHandle
GetCPInfo
GetModuleHandleA
GetModuleHandleW
GetStartupInfoA
GetCurrentDirectoryW
TerminateProcess
UnlockFile
ExitThread
GetLastError
SetUnhandledExceptionFilter
HeapCreate
ReadFile
LockResource
HeapFree
RemoveDirectoryW
LCMapStringA
GetVersion
CompareStringW
GlobalLock
GetLocalTime
GetVersionExA
Sleep
GlobalAlloc
TlsGetValue
InterlockedExchange
GetModuleFileNameA
CreateFileW
GetFileSize
GetProcessHeap
CreateThread
GetStartupInfoW
LCMapStringW
GetFileType
GetEnvironmentStrings
FileTimeToLocalFileTime
FlushFileBuffers
SetHandleCount
GetStringTypeA
HeapAlloc
SetFilePointer
TlsSetValue
LoadLibraryW
WideCharToMultiByte
CreateFileA
FreeEnvironmentStringsW
CreateDirectoryA
HeapReAlloc
TlsAlloc
InitializeCriticalSection
DeleteCriticalSection
GetSystemTime
CreateMutexW
RtlUnwind
DeleteFileW
GetCurrentThreadId
lstrcatW
GetCurrentProcessId
IsBadCodePtr
WaitForSingleObject
SetEnvironmentVariableA
WriteConsoleA
GetProfileIntW
LoadLibraryA
GetLocaleInfoA
RaiseException
LockFile
GlobalHandle
WriteFile
VirtualAlloc
FreeResource
CloseHandle
lstrcpyW
LocalReAlloc
GetModuleFileNameW
CompareStringA
GetCommandLineA
GetCurrentProcess
GetStringTypeW
InterlockedDecrement
OpenProcess
MulDiv
SystemTimeToFileTime
ResumeThread
lstrlenA
GetThreadLocale
SetLastError
lstrcmpA
GetTimeZoneInformation
GlobalFree
GetSystemTimeAsFileTime
GetStdHandle
FileTimeToSystemTime
LocalAlloc
GetEnvironmentStringsW
GetProcAddress
SetStdHandle
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFullPathNameW
lstrcpynW
GetVersionExW
EnterCriticalSection
VirtualQuery
VirtualFree
HeapDestroy
CompareFileTime
LeaveCriticalSection
LoadResource
SetErrorMode
TlsFree
GetCommandLineW
GetACP
GlobalDeleteAtom
QueryPerformanceCounter
HeapSize
ExitProcess
lstrcmpW
GetUserDefaultLCID
InterlockedIncrement
GetTickCount

winspool.drv

DocumentPropertiesA
AddPrinterA
GetPrinterDriverDirectoryA
AddPrinterDriverA
OpenPrinterA
EnumJobsA
EnumPrinterDriversA
ClosePrinter
DeviceCapabilitiesA
ord204
EnumPrintersA

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHChangeNotify
Shell_NotifyIconW
DragQueryFileW
DragFinish
ord155
SHBrowseForFolderW
ShellExecuteW

advapi32

DeleteService
FreeSid
RegCreateKeyExA
OpenProcessToken
RegEnumKeyExA
RegEnumKeyA
RegOpenKeyA
GetUserNameA
GetTokenInformation
SetSecurityDescriptorDacl
OpenThreadToken
RegDeleteKeyA
AllocateAndInitializeSid
RegEnumValueA
RegQueryValueExA
CreateServiceA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
CloseServiceHandle
RegQueryInfoKeyA
RegCreateKeyA
ControlService
InitializeAcl
RegSetValueExA
RegQueryValueA
GetLengthSid
InitializeSecurityDescriptor

user32

GetSubMenu
SendDlgItemMessageA
EmptyClipboard
UnregisterClassA
LoadIconW
GetSystemMetrics
SetWindowTextW
SetFocus
DestroyWindow
IsIconic
SetRect
CopyImage
GetWindowDC
EndPaint
LoadBitmapW
LoadCursorW
CheckMenuItem
SetForegroundWindow
AttachThreadInput
SetCapture
LoadImageW
MessageBeep
UpdateWindow
WindowFromPoint
DeleteMenu
IsMenu
IsWindowVisible
GetClassLongW
ReleaseCapture
FrameRect
CharUpperW
GetSystemMenu
GetMenuState
GetDCEx
IsWindow
GetSysColorBrush
GetMenuItemID
SetMenu
SetMenuItemInfoW
MessageBoxW
DeferWindowPos
IsZoomed
DrawFocusRect
PostMessageW
CopyRect
GetClientRect
DrawStateW
SetWindowRgn
IsClipboardFormatAvailable
GetActiveWindow
GetAsyncKeyState
PostQuitMessage
AdjustWindowRectEx
GetDlgItem
DrawIconEx
MapWindowPoints
PeekMessageW
GetKeyState
KillTimer
GetMenuItemInfoW
MapDialogRect
GetWindowThreadProcessId
ShowWindow
SystemParametersInfoA
LoadMenuW
RemoveMenu
GetNextDlgGroupItem
GetDesktopWindow
GetClassNameW
SetTimer
GetWindowTextW
IsDialogMessageW
GetFocus
GetWindow
InflateRect
RegisterClassExW
GetMenuDefaultItem
SetParent
TrackPopupMenuEx
SetActiveWindow
ValidateRect
LoadStringW
GetWindowLongW
GetCapture
RegisterClassW
SetWindowLongW
MoveWindow
IsChild
GetSysColor
DrawTextW
DestroyAcceleratorTable
GetMessageTime
GetCursorPos
BeginPaint
LockWindowUpdate
SetCursorPos
SetCursor
RegisterClipboardFormatW
AppendMenuW
SetWindowPos
DispatchMessageW
GetWindowRgn
GetForegroundWindow
TranslateMessage
GetMessagePos
EqualRect
GetMenu
DestroyMenu
EndDialog
IsDlgButtonChecked
BringWindowToTop
SetClipboardData
GetClassInfoExW
DrawTextExW
GetClassInfoW
GetWindowRect
GetMenuItemCount
GetTopWindow
ScreenToClient
IsWindowEnabled
TranslateMDISysAccel
CreatePopupMenu
SetMenuDefaultItem
GetClipboardData
RedrawWindow
CreateWindowExW
LoadAcceleratorsW
DestroyCursor
UnhookWindowsHookEx
ShowOwnedPopups
PtInRect
wsprintfW
GetParent
OpenClipboard
ReleaseDC
GetDC
CallNextHookEx
CreateDialogIndirectParamW
TrackPopupMenu
UnpackDDElParam
GetScrollInfo
GetWindowPlacement
IntersectRect
FillRect
OffsetRect
DestroyIcon
EnableMenuItem
ShowScrollBar
EnableWindow
EnumChildWindows
InvalidateRect

wsock32

WSACleanup

ole32

OleLockRunning
CreateItemMoniker
CoTaskMemFree
RegisterDragDrop
WriteClassStg
CreateOleAdviseHolder
CoRegisterMessageFilter
CreateBindCtx
OleCreateStaticFromData
CLSIDFromProgID
StringFromGUID2
CreateDataAdviseHolder

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f69c5533149dd66c42c2fa80d2f86a84

Headers

File Characteristics

Imports

comdlg32

gdi32

kernel32

winspool.drv

shell32

advapi32

user32

wsock32

ole32

Sections

.text Size: 84KB - Virtual size: 80KB

.rdata Size: 472KB - Virtual size: 471KB

.data Size: 108KB - Virtual size: 106KB

.rsrc Size: 56KB - Virtual size: 55KB

.text
Size: 84KB - Virtual size: 80KB

.rdata
Size: 472KB - Virtual size: 471KB

.data
Size: 108KB - Virtual size: 106KB

.rsrc
Size: 56KB - Virtual size: 55KB