fcf24fba5fe2e48477a004cd117739f6bb060092191073b3a62da4ef23f86349

Sharing

Copy URL Twitter E-mail

General

Target

fcf24fba5fe2e48477a004cd117739f6bb060092191073b3a62da4ef23f86349
Size

264KB
MD5

64df150ab506bd89bfa5a1c9714936c1
SHA1

b01726c2aaf80b7de35620099d61d0c5f2f46ce6
SHA256

fcf24fba5fe2e48477a004cd117739f6bb060092191073b3a62da4ef23f86349
SHA512

a5da659ab64cd8a179b67dd69ebdef8c12fa44521d6caa11e5bf63819abbf326a937ab9329a1c63c75ade491ec4f0d8167083c1a8ee3ebcf738c216d4b5d45c0
SSDEEP

6144:dUhMAzlX7yQOq+cuiWg1VAEiexkNhcUszlK:dUtzNhZ+cuif1+Ei1psz

Score

N/A

Malware Config

Signatures

Files

fcf24fba5fe2e48477a004cd117739f6bb060092191073b3a62da4ef23f86349
.exe windows x86

05a2d3ef657ec294d02f948009a53ef1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantTimeToSystemTime
VariantInit
VariantCopy
VariantClear
VariantChangeType
VarR8Pow
VarDecFromBool
OleCreateFontIndirect
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysAllocString
SafeArrayDestroy

winspool.drv

ClosePrinter
DocumentPropertiesW
EnumPrinterDataW
GetPrintProcessorDirectoryW
OpenPrinterW

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW
ShellExecuteW

advapi32

RegSetValueExW
RegQueryValueW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegCloseKey
OpenTraceW
LsaOpenPolicy
GetTrusteeTypeW
RegisterEventSourceW

wininet

InternetReadFile
InternetOpenW
InternetHangUp
InternetGetLastResponseInfoW
HttpSendRequestW
HttpOpenRequestW
GetUrlCacheEntryInfoW
GetUrlCacheEntryInfoExW

gdi32

GetTextColor
GetStockObject
GetMapMode
GetDeviceCaps
GetClipBox
ExtTextOutW
GetViewportExtEx
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
GetWindowExtEx
OffsetViewportOrgEx
SelectObject
SetBkColor
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
TextOutW
ExtSelectClipRgn
StartPage
CreateBitmap

user32

PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
PostQuitMessage
SetMenuItemBitmaps
SetRect
SetWindowContextHelpId
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
ValidateRect
WinHelpW
PostMessageW
PeekMessageW
SetForegroundWindow
OffsetRect
AdjustWindowRectEx
ModifyMenuW
MessageBoxW
MapWindowPoints
MapDialogRect
LoadImageW
LoadIconW
IsWindowVisible
IsWindow
IsRectEmpty
IsIconic
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
GrayStringW
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowDC
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetLastActivePopup
GetKeyState
GetFocus
GetDlgItem
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassLongW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CharNextW
CallNextHookEx
BeginPaint
AppendMenuW
LoadCursorW

comdlg32

GetFileTitleW
PageSetupDlgA
WantArrows
ChooseFontW

kernel32

TerminateProcess
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
TlsFree
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
WriteConsoleA
WriteFile
lstrcmpA
lstrcmpW
lstrlenW
FormatMessageW
FindResourceW
FindClose
FileTimeToLocalFileTime
EnumSystemLocalesA
DuplicateHandle
CreateHardLinkA
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CloseHandle
TlsGetValue
SetFileAttributesW
SetErrorMode
ReadFile
QueryPerformanceCounter
LockResource
LocalReAlloc
LocalFree
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalReAlloc
GlobalHandle
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersion
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetStringTypeA
GetProcessHeap
GetOEMCP
GetModuleHandleA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileSize
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleMode
GetCommandLineA
GetCPInfo
GetBinaryTypeW
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
AreFileApisANSI

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05a2d3ef657ec294d02f948009a53ef1

Headers

File Characteristics

Imports

oleaut32

winspool.drv

shell32

advapi32

wininet

gdi32

user32

comdlg32

kernel32

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 147KB - Virtual size: 148KB

.data Size: 35KB - Virtual size: 152KB

.idata Size: 6KB - Virtual size: 7KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 147KB - Virtual size: 148KB

.data
Size: 35KB - Virtual size: 152KB

.idata
Size: 6KB - Virtual size: 7KB

.rsrc
Size: 21KB - Virtual size: 23KB