9a6cf2693ef816190210de350eba5d0e595e8e1447c65af853c1b981b901edd0

Sharing

Copy URL Twitter E-mail

General

Target

9a6cf2693ef816190210de350eba5d0e595e8e1447c65af853c1b981b901edd0
Size

272KB
MD5

21e7ab1e5ced047d2bcb36d4f198ebe0
SHA1

a16e4c1a0d5cdb35e06115b1e993e7a5038396da
SHA256

9a6cf2693ef816190210de350eba5d0e595e8e1447c65af853c1b981b901edd0
SHA512

bff51c572f4ac9af3d57ca03012712bff2dcbd727943875b2fe8d8b0a121e77ad12f268190bdd9040ef029be2d3558fc85bb4324c62c92f7ff0c9742741ae240
SSDEEP

6144:FV8jfRuL082jXZ739k4YVIfNQXk6fuZW4NFzeMGy:FOc08WJ73O4YVIWNmZW47zr

Score

N/A

Malware Config

Signatures

Files

9a6cf2693ef816190210de350eba5d0e595e8e1447c65af853c1b981b901edd0
.exe windows x86

051da07e630ac46b13dae5f3c2fa4c40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

dwOKSubclass
GetFileTitleA
LoadAlterBitmap
dwLBSubclass

user32

PostMessageA
GetMenuItemID
GetCapture
GetWindow
GetLastActivePopup
GrayStringA
DdeEnableCallback
LoadStringA
DestroyWindow
TabbedTextOutA
GetPropA
SetActiveWindow
IsDialogMessageA
SetWindowLongA
GetParent
LoadBitmapA
ModifyMenuA
GetSubMenu
GetWindowTextA
UnregisterClassA
GetKeyState
GetNextDlgTabItem
SetPropA
RemovePropA
CreateWindowExA
MapWindowPoints
PeekMessageA
ClientToScreen
SystemParametersInfoA
DispatchMessageA
RegisterWindowMessageA
GetSystemMetrics
ShowWindow
GetActiveWindow
SetWindowsHookExA
RegisterClassA
GetMessageTime
IsIconic
EndPaint
DrawIcon
GetTopWindow
IsWindow
GetMessagePos
WinHelpA
GetWindowPlacement
CheckMenuItem
SetCursor
GetWindowLongA
SetWindowTextA
DestroyMenu
SendMessageA
DefWindowProcA
GetDlgCtrlID
GetMenuCheckMarkDimensions
PostQuitMessage
LoadIconA
GetDlgItem
BeginPaint
ReleaseDC
LoadCursorA
CharUpperA
GetClientRect
GetMenuItemCount
IsWindowVisible
EnableMenuItem
GetSysColor
TranslateMessage
GetMenuState
GetWindowTextLengthA
DrawTextA
ExitWindowsEx
CallNextHookEx
GetSysColorBrush
EnableWindow
GetForegroundWindow
EndDialog
GetClassLongA
GetFocus
UpdateWindow
MessageBoxA
CreateDialogIndirectParamA
GetClassNameA
GetMessageA
GetCursorPos
GetWindowRect
GetDC
CallWindowProcA
UnhookWindowsHookEx
wsprintfA
ValidateRect
SetMenuItemBitmaps
IsWindowEnabled
SetForegroundWindow
PtInRect
SetWindowPos
SendDlgItemMessageA
CopyRect
GetClassInfoA
GetMenu

winspool.drv

DocumentPropertiesA
DeletePrinterIC
OpenPrinterA
EndDocPrinter
ClosePrinter
QueryColorProfile
FindNextPrinterChangeNotification
PlayGdiScriptOnPrinterIC

kernel32

GetOEMCP
GlobalFlags
IsBadWritePtr
FindClose
GlobalAddAtomA
GlobalAlloc
FreeEnvironmentStringsA
GetCurrentThread
IsBadReadPtr
CompareStringW
GetFileAttributesA
FreeEnvironmentStringsW
InterlockedDecrement
CompareStringA
TerminateProcess
GetCurrentThreadId
GetWindowsDirectoryA
SetConsoleCursorPosition
RaiseException
GetThreadLocale
lstrcmpiA
SetFilePointer
InterlockedIncrement
GlobalGetAtomNameA
MulDiv
FreeLibrary
SetTimeZoneInformation
FileTimeToLocalFileTime
TlsSetValue
SetCurrentDirectoryA
GetSystemDirectoryA
HeapDestroy
GetFullPathNameA
GetVersionExA
SystemTimeToFileTime
EnterCriticalSection
CloseHandle
SetHandleCount
TlsAlloc
CreateFileA
SetUnhandledExceptionFilter
TlsFree
SetErrorMode
GetFileType
LocalFileTimeToFileTime
VirtualFree
GlobalUnlock
HeapReAlloc
lstrcatA
GetStdHandle
SetConsoleCursorInfo
GlobalReAlloc
lstrcpyA
HeapCreate
ReleaseActCtx
DeleteFileA
FatalExit
HeapFree
UnhandledExceptionFilter
GetDriveTypeA
ClearCommError
LoadLibraryA
GlobalHandle
GetFileSize
LocalAlloc
FlushInstructionCache
GetLastError
WideCharToMultiByte
InitializeSListHead
WritePrivateProfileStringA
LoadResource
GetStringTypeA
SetFileTime
SetConsoleTextAttribute
GlobalLock
GetFileTime
GetEnvironmentStringsA
GetEnvironmentStringsW
ReadFile
SetStdHandle
GlobalFindAtomA
GetVersion
SystemTimeToTzSpecificLocalTime
HeapAlloc
lstrcmpA
LCMapStringA
InitializeCriticalSection
UnlockFile
TlsGetValue
GetEnvironmentVariableA
SetSystemTime
GetTimeZoneInformation
lstrlenA
Sleep
GetACP
GetProcessVersion
IsDebuggerPresent
FlushFileBuffers
GlobalDeleteAtom
FindResourceA
FindFirstFileA
SetLastError
VirtualAlloc
LocalUnlock
GetCurrentProcess
HeapSize
GetCommandLineA
DosDateTimeToFileTime
LockFile
IsBadCodePtr
MultiByteToWideChar
SetConsoleScreenBufferSize
Beep
RtlUnwind
GlobalFree
LCMapStringW
ExitProcess
GetModuleHandleA
SetEndOfFile
LockResource
lstrcpynA
GetStringTypeW
LeaveCriticalSection
IsValidLocale
MapUserPhysicalPages
GetStartupInfoA
GetModuleFileNameA
LocalReAlloc
GetProcAddress
DuplicateHandle
GetVolumeInformationA
FileTimeToSystemTime
FindNextFileA
WriteFile
Toolhelp32ReadProcessMemory
GetCurrentDirectoryA
SetEnvironmentVariableA
DeleteCriticalSection
LocalFree
GetCPInfo
SetFileAttributesA

winmm

mixerOpen
waveOutOpen
waveOutGetPitch
midiStreamProperty
mid32Message
mmioAdvance

gdi32

GetStockObject
SetWindowExtEx
DeleteObject
SelectClipRgn
PtVisible
GetObjectA
Escape
CreateDIBitmap
SetTextColor
SetMapMode
EnumEnhMetaFile
ScaleViewportExtEx
gdiPlaySpoolStream
GetDeviceCaps
CreateEllipticRgn
RoundRect
ExtTextOutA
RectVisible
SetViewportOrgEx
GetClipBox
SetViewportExtEx
SelectObject
ScaleWindowExtEx
RestoreDC
PtInRegion
DeleteDC
GetDCPenColor
GdiPlayDCScript
SetBkColor
GetRelAbs
CreateBitmap
TextOutA
SaveDC
OffsetViewportOrgEx

advapi32

RegDeleteValueA
LsaEnumeratePrivileges
SystemFunction016
RegOpenKeyExA
AddAccessDeniedAceEx
RegCloseKey
LockServiceDatabase
MSChapSrvChangePassword
RegSetValueExA
AreAnyAccessesGranted
ElfCloseEventLog
LsaICLookupNamesWithCreds
GetAclInformation
TraceEventInstance
AddUsersToEncryptedFile
SetSecurityDescriptorControl
ElfOldestRecord
ImpersonateLoggedOnUser
RegCreateKeyExA
SystemFunction030

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

051da07e630ac46b13dae5f3c2fa4c40

Headers

File Characteristics

Imports

comdlg32

user32

winspool.drv

kernel32

winmm

gdi32

advapi32

Sections

.text Size: 187KB - Virtual size: 187KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 35KB - Virtual size: 35KB

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 187KB - Virtual size: 187KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 35KB - Virtual size: 35KB

.rsrc
Size: 31KB - Virtual size: 30KB