a476e466fbda95b2d596b33c0a88bfcb782758082877622092b0fcf04bff580a

Sharing

Copy URL Twitter E-mail

General

Target

a476e466fbda95b2d596b33c0a88bfcb782758082877622092b0fcf04bff580a
Size

281KB
MD5

5cb4a622c95814f943b8a5cf0f57bece
SHA1

b76bc632d7716dad9d0846fa012bbc667611959f
SHA256

a476e466fbda95b2d596b33c0a88bfcb782758082877622092b0fcf04bff580a
SHA512

cdd555f4b51e92d790ad0fd25f28770db23b7d482e72d03a38572c527d82efdd4719496afba9eaf6571ecb368151c8fc07ca6565c3bbbf216fe2c3a354ea1213
SSDEEP

3072:x6pI7mxceVGCRMvN4Y2Syp52ry3Apg11Txqh1GxDfXTgfe3RiZqMEjuS3bE6bikN:x+RGETF51LqDGLTgf2RHGk3G

Score

N/A

Malware Config

Signatures

Files

a476e466fbda95b2d596b33c0a88bfcb782758082877622092b0fcf04bff580a
.exe windows x86

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

ord8

olepro32

ord253

ole32

CreateILockBytesOnHGlobal
CoTaskMemFree
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromCLSID
CoTaskMemAlloc

comdlg32

ChooseColorA
ChooseFontA
ChooseFontW
GetOpenFileNameA
GetFileTitleA
FindTextW
FindTextA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comctl32

ord17

user32

TabbedTextOutA
ShowWindow
SetWindowsHookExA
SetWindowTextA
SetWindowLongA
SetWindowContextHelpId
SetRect
SetPropA
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetActiveWindow
SendMessageA
SendDlgItemMessageA
RemovePropA
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostThreadMessageA
PostQuitMessage
PostMessageA
OffsetRect
MoveWindow
ModifyMenuA
MessageBoxA
MessageBeep
MapWindowPoints
MapDialogRect
LoadStringA
LoadIconA
IsWindowVisible
IsWindow
IsIconic
IsDialogMessageA
IsChild
GrayStringA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
TranslateMessage
GetTopWindow
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropA
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageTime
GetMessagePos
GetMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetCursorPos
GetCursor
GetClassNameA
GetClassLongA
GetCapture
EndDialog
EnableWindow
DestroyWindow
DestroyMenu
DefWindowProcA
CreateWindowExA
CreateDialogIndirectParamA
CopyRect
CopyAcceleratorTableA
ClientToScreen
CheckMenuItem
CharUpperA
CharNextA
CallWindowProcA
CallNextHookEx
AdjustWindowRectEx
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
ValidateRect
WinHelpA
wsprintfA
GetWindow

oleaut32

VariantCopy
VariantClear
VariantChangeType
VarBstrFromDate
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
VariantTimeToSystemTime

kernel32

lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrlenW
lstrlenA
lstrcatA
WritePrivateProfileStringA
WriteFile
WinExec
WideCharToMultiByte
VirtualFree
VirtualAlloc
UnlockFile
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MultiByteToWideChar
MulDiv
LockResource
LockFile
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVolumeInformationA
GetVersion
GetTimeZoneInformation
GetTickCount
GetTempPathA
GetTempFileNameA
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetShortPathNameA
GetProcessVersion
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFullPathNameA
GetFileType
GetFileTime
GetFileSize
GetFileAttributesA
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageA
FlushFileBuffers
FindResourceA
FindFirstFileA
FindClose
FileTimeToSystemTime
ExitProcess
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
CreateFileA
CompareStringW
CompareStringA
CloseHandle
FileTimeToLocalFileTime

gdi32

SetBkColor
SelectObject
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
Rectangle
RectVisible
PtVisible
OffsetViewportOrgEx
LPtoDP
SetMapMode
GetTextColor
GetStockObject
GetObjectA
GetMapMode
GetDeviceCaps
GetClipBox
GetBkColor
ExtTextOutA
ExtCreatePen
DeleteDC
DPtoLP
CreateBitmap
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutA
GetWindowExtEx

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

Imports

oledlg

olepro32

ole32

comdlg32

advapi32

winspool.drv

comctl32

user32

oleaut32

kernel32

gdi32

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 148KB - Virtual size: 148KB

.data Size: 33KB - Virtual size: 152KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 43KB - Virtual size: 43KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 148KB - Virtual size: 148KB

.data
Size: 33KB - Virtual size: 152KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 43KB - Virtual size: 43KB