af488d9f1b86573fc058ac996b9a3262f390536298b6fe79688a67fad9e2d8f7

Sharing

Copy URL Twitter E-mail

General

Target

af488d9f1b86573fc058ac996b9a3262f390536298b6fe79688a67fad9e2d8f7
Size

415KB
MD5

70423150c1e18fdcc02eeb67d32934b0
SHA1

48b207e0e8843afc46cadf744f16f32d4a317bfb
SHA256

af488d9f1b86573fc058ac996b9a3262f390536298b6fe79688a67fad9e2d8f7
SHA512

751c1e4144582c1a6722437912069933cd5a70c4639858d479f3f603155efab1ffafbe1944ce9525d75b48f051f67c23be517b9d15d6aa5f80275826a07afbe0
SSDEEP

6144:eb7VOWng4ULhgyMZG0201T9skiCUDoRedhUYi/Wl4/fmAzf37:c5OYg4ULe/T9swguuhWemFzf37

Score

N/A

Malware Config

Signatures

Files

af488d9f1b86573fc058ac996b9a3262f390536298b6fe79688a67fad9e2d8f7
.exe windows x86

855c85f745d42154c29797564c6d15d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetStdHandle

user32

PostMessageW
GetMessageW
ShowWindow
LoadStringW
SendMessageW
wsprintfW
SystemParametersInfoW
MessageBoxW
SetWindowPos
CharNextW
GetMonitorInfoW
FindWindowW
DefWindowProcW
CallWindowProcW
CloseWindowStation
PostQuitMessage
KillTimer
UnregisterDeviceNotification
DefDlgProcW
SetWindowTextW
MonitorFromRect
DispatchMessageW
SetWindowLongW
RegisterDeviceNotificationW
DestroyWindow
GetSysColorBrush
RegisterWindowMessageW
CreateWindowExW
TranslateMessage
SendDlgItemMessageW
GetSystemMetrics
GetClientRect
SetTimer
EndDialog
GetWindowLongW
SetForegroundWindow
LoadImageW

rpcrt4

RpcBindingVectorFree
NdrServerCall2
RpcBindingSetAuthInfoExW
RpcBindingToStringBindingW
NdrClientCall2
RpcServerRegisterIfEx
I_RpcBindingInqTransportType
RpcBindingFromStringBindingW
RpcRevertToSelf
RpcStringBindingParseW
RpcBindingFree
RpcServerUnregisterIf
RpcStringFreeW
RpcImpersonateClient
RpcServerInqBindings

ole32

CoUninitialize
CoCreateInstance
CLSIDFromString
CoInitialize

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
CreateStatusWindowW

ntdll

NtClose
RtlDeleteResource
NtQueryVirtualMemory
RtlAcquireResourceShared
RtlInitializeResource
RtlUnwind
RtlAcquireResourceExclusive
RtlOpenCurrentUser
_wcsicmp
NtDuplicateToken
RtlReleaseResource
wcstoul

winspool.drv

SpoolerPrinterEvent
SetPortA
GetPrinterDataExW
GetPrinterDriverA

setupapi

SetupDiGetDeviceInterfaceAlias
SetupDiEnumDeviceInterfaces
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInterfaceRegKey
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiGetDeviceInstanceIdW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW

winsta

WinStationQueryInformationW

shell32

SHCreateDirectoryExA

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 635KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

855c85f745d42154c29797564c6d15d3

Headers

File Characteristics

Imports

kernel32

user32

rpcrt4

ole32

comctl32

ntdll

winspool.drv

setupapi

winsta

shell32

Sections

.text Size: 134KB - Virtual size: 133KB

.data Size: 148KB - Virtual size: 635KB

.rdata Size: 25KB - Virtual size: 24KB

.rsrc Size: 102KB - Virtual size: 102KB

.data Size: 5KB - Virtual size: 5KB

.text
Size: 134KB - Virtual size: 133KB

.data
Size: 148KB - Virtual size: 635KB

.rdata
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 102KB - Virtual size: 102KB

.data
Size: 5KB - Virtual size: 5KB