a7fc484acab0b3021ba5b58c3e896f20aada4eb09e81e81ac0a9ad0e68c80ddb

Sharing

Copy URL Twitter E-mail

General

Target

a7fc484acab0b3021ba5b58c3e896f20aada4eb09e81e81ac0a9ad0e68c80ddb
Size

246KB
MD5

0a2ab2e1965d8197ff4df5f3c42b2080
SHA1

05dc20d5152bf7695e3bc000872f6861ec242c61
SHA256

a7fc484acab0b3021ba5b58c3e896f20aada4eb09e81e81ac0a9ad0e68c80ddb
SHA512

de91a1444c7774920c97460b8440fd4960bfded2c26122e3bf51b5884c38e47e0135584cda428738f14981058d04b80b02da7da414d17d450868845201a8050a
SSDEEP

6144:qBMg+jPs+R1qUEtOdtFs3au+C+G/c6ELSiEQt2QZd:a4E61qmtFUh+C+G/GSiEG2Q

Score

N/A

Malware Config

Signatures

Files

a7fc484acab0b3021ba5b58c3e896f20aada4eb09e81e81ac0a9ad0e68c80ddb
.exe windows x86

a1785d820f18ae69e41179384a896fda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ValidateRect
GetSysColorBrush
TabbedTextOutA
GetClassLongA
MessageBoxA
GetTopWindow
IsIconic
DrawIcon
SetActiveWindow
EnableWindow
MapWindowPoints
SendDlgItemMessageA
UnhookWindowsHookEx
SetPropA
ModifyMenuA
DestroyMenu
GetPropA
SetWindowTextA
LoadCursorA
GetWindowLongA
DrawTextA
WinHelpA
DispatchMessageA
LoadBitmapA
GetMenuItemCount
SendMessageA
EndDialog
CreateDialogIndirectParamA
GetForegroundWindow
SetFocus
IsDialogMessageA
SetForegroundWindow
GetSysColor
GetActiveWindow
GetMenu
IsWindowVisible
UnregisterClassA
DefWindowProcA
GetClassNameA
PostQuitMessage
GetMessageA
EnableMenuItem
PostMessageA
DdeEnableCallback
GetNextDlgTabItem
BeginPaint
AdjustWindowRectEx
CallWindowProcA
GetWindowPlacement
GetLastActivePopup
GetSystemMetrics
ShowWindow
RegisterWindowMessageA
CallNextHookEx
SetCursor
GetCursorPos
TranslateMessage
DestroyWindow
GetDC
ReleaseDC
GetMenuItemID
GetKeyState
GetMessagePos
CopyRect
RemovePropA
SetWindowPos
GetParent
GetWindowTextLengthA
UpdateWindow
IsWindow
CheckMenuItem
GetMenuState
GetClientRect
PtInRect
ExitWindowsEx
GetClassInfoA
GetWindow
EndPaint
GetCapture
GetMenuCheckMarkDimensions
GrayStringA
ClientToScreen
GetWindowTextA
LoadStringA
GetFocus
LoadIconA
RegisterClassA
GetWindowRect
GetMessageTime
CreateWindowExA
IsWindowEnabled
SetWindowLongA
GetDlgItem
GetSubMenu
SetMenuItemBitmaps
PeekMessageA
GetDlgCtrlID
SystemParametersInfoA
CharUpperA
wsprintfA
SetWindowsHookExA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

gdi32

GetObjectA
RectVisible
GdiPlayDCScript
SelectObject
DeleteObject
CreateDIBitmap
GetDeviceCaps
CreateEllipticRgn
PtVisible
EnumEnhMetaFile
GetRelAbs
ScaleWindowExtEx
ScaleViewportExtEx
SetMapMode
OffsetViewportOrgEx
TextOutA
SetViewportOrgEx
CreateBitmap
Escape
RestoreDC
SetWindowExtEx
SetViewportExtEx
ExtTextOutA
PtInRegion
SaveDC
RoundRect
SetTextColor
gdiPlaySpoolStream
GetClipBox
DeleteDC
GetStockObject
SetBkColor
GetDCPenColor

kernel32

GetVersionExA
SetEnvironmentVariableA
FindNextFileA
EnterCriticalSection
GlobalLock
ReleaseActCtx
GetLastError
SetConsoleScreenBufferSize
GlobalGetAtomNameA
SetConsoleTextAttribute
InitializeSListHead
GetCommandLineA
SetTimeZoneInformation
lstrcmpiA
SetUnhandledExceptionFilter
CompareStringA
DuplicateHandle
SetErrorMode
SetCurrentDirectoryA
IsBadWritePtr
HeapDestroy
VirtualAlloc
MultiByteToWideChar
LCMapStringW
SetConsoleCursorPosition
ReadProcessMemory
lstrcatA
LockFile
GetFullPathNameA
GlobalAddAtomA
lstrcpyA
GetCurrentDirectoryA
GlobalFree
SystemTimeToFileTime
DeleteFileA
SetSystemTime
FlushFileBuffers
GetWindowsDirectoryA
LocalUnlock
CreateFileA
GetTimeZoneInformation
MulDiv
GlobalDeleteAtom
LocalFileTimeToFileTime
FreeLibrary
WritePrivateProfileStringA
GetEnvironmentStringsW
GetVersion
HeapSize
GetCPInfo
GetOEMCP
HeapFree
IsBadReadPtr
GetCurrentThreadId
WriteFile
SetConsoleCursorInfo
GetProcessVersion
GetStartupInfoA
SetFileAttributesA
GetProcAddress
FindFirstFileA
MapUserPhysicalPages
GlobalHandle
LocalAlloc
FindClose
FileTimeToLocalFileTime
GetModuleHandleA
SetHandleCount
InterlockedDecrement
ClearCommError
TlsFree
UnlockFile
InterlockedIncrement
RaiseException
GetCurrentThread
GetCurrentProcess
lstrlenA
SetFilePointer
InitializeCriticalSection
SetStdHandle
HeapReAlloc
SetFileTime
GetVolumeInformationA
GlobalReAlloc
LoadLibraryA
GetStdHandle
GetStringTypeW
FatalExit
TlsAlloc
Beep
SetLastError
RtlUnwind
ReadFile
GetFileTime
GetDriveTypeA
HeapCreate
CompareStringW
FindResourceA
GlobalFlags
Toolhelp32ReadProcessMemory
GetFileSize
TlsGetValue
LocalFree
TerminateProcess
CloseHandle
FreeEnvironmentStringsW
UnhandledExceptionFilter
LoadResource
DeleteCriticalSection
LockResource
SetEndOfFile
IsBadCodePtr
SystemTimeToTzSpecificLocalTime
IsValidLocale
lstrcmpA
GetStringTypeA
GetFileType
Sleep
VirtualFree
FlushInstructionCache
LeaveCriticalSection
GlobalUnlock
IsDebuggerPresent
GetEnvironmentVariableA
GetFileAttributesA
GlobalAlloc
FileTimeToSystemTime
GetSystemDirectoryA
GetACP
FreeEnvironmentStringsA
LCMapStringA
LocalReAlloc
lstrcpynA
GetThreadLocale
DosDateTimeToFileTime
ExitProcess
GlobalFindAtomA
TlsSetValue
HeapAlloc
WideCharToMultiByte
GetEnvironmentStringsA
GetModuleFileNameA

comdlg32

GetFileTitleA

advapi32

RegOpenKeyExA
AddAccessDeniedAceEx
SystemFunction016
ElfOldestRecord
MSChapSrvChangePassword
RegCreateKeyExA
LsaEnumeratePrivileges
RegDeleteValueA
RegCloseKey
LockServiceDatabase
SystemFunction030
GetAclInformation
LsaICLookupNamesWithCreds
RegSetValueExA
AddUsersToEncryptedFile
ElfCloseEventLog

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1785d820f18ae69e41179384a896fda

Headers

File Characteristics

Imports

user32

winspool.drv

gdi32

kernel32

comdlg32

advapi32

Sections

.text Size: 171KB - Virtual size: 170KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 32KB - Virtual size: 32KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 171KB - Virtual size: 170KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 27KB - Virtual size: 27KB