921fa6306501c72128af6dc925617152420240c10d5749c4074a00d0196b4b97

Sharing

Copy URL Twitter E-mail

General

Target

921fa6306501c72128af6dc925617152420240c10d5749c4074a00d0196b4b97
Size

120KB
MD5

15c1aa95c190b6d6fe027800ea3b5afc
SHA1

45bd1394eeb1c4f8e32bb4f2591a0062fa28139d
SHA256

921fa6306501c72128af6dc925617152420240c10d5749c4074a00d0196b4b97
SHA512

4ba14e7d3dc010e4f28bd53f910302bc23eb9ea4585a696d1eba737cc9fc9eb976a9de7150176f20ed9b6b1f16333748a4e44d49cbfc0d1ef2480165c8153398
SSDEEP

3072:3lr7U65ITNm+v9HJ+aEKWD7OwWFWEAv6I4b:1N+TNmQ1J+tl7OwGWvv6I4b

Score

N/A

Malware Config

Signatures

Files

921fa6306501c72128af6dc925617152420240c10d5749c4074a00d0196b4b97
.exe windows x86

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreA
GetDiskFreeSpaceA
GetProcAddress
GetNamedPipeInfo
InitializeCriticalSection
MulDiv
DosDateTimeToFileTime
GetTempFileNameA
OpenMutexW
CreateEventA
GetLongPathNameW
OpenFile
GetACP
EnumDateFormatsA
GetCurrentProcessId
CreateMailslotW
GetSystemDirectoryA
CopyFileA
ExpandEnvironmentStringsA
GetStartupInfoA
GetLocaleInfoA
GetStartupInfoW
GlobalGetAtomNameW
GetUserDefaultLangID
GetPriorityClass
SetCalendarInfoW
FlushFileBuffers
GetEnvironmentVariableW
LocalAlloc
EnumTimeFormatsA
CompareStringA
GetSystemDirectoryW
ExpandEnvironmentStringsW
GetNumberFormatW
Beep
FindResourceA
GetCommandLineA
GetLocaleInfoW
GetCalendarInfoW
FileTimeToDosDateTime
LocalFree
WaitForMultipleObjects
GetModuleHandleA
SetComputerNameW
IsBadStringPtrW
ConnectNamedPipe
GetThreadPriority
GlobalFindAtomA
CreateFileA
GetSystemDefaultLCID
FreeResource
FindResourceW
ReadFile
GlobalDeleteAtom
GlobalGetAtomNameA
GetComputerNameA
GetCPInfo

user32

SendDlgItemMessageA
IsDlgButtonChecked
TrackPopupMenu
SendMessageW
ActivateKeyboardLayout
PostMessageW
SetWindowPos
LoadImageA
CreateAcceleratorTableW
GetMessageW
SendDlgItemMessageW
EnableMenuItem
GetKeyboardType
wsprintfA
LoadIconW
ReleaseDC
WinHelpA
LoadIconA
EmptyClipboard

gdi32

CreateDCA
GetCharWidth32W
SaveDC
ExtTextOutW
GetCharWidthFloatW
SetDCBrushColor
ColorMatchToTarget
LineTo
SetArcDirection
CreateSolidBrush
GetTextExtentExPointW
SetRectRgn
CreateFontIndirectExW

advapi32

RegEnumValueA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueA

comctl32

ImageList_SetFlags
CreateToolbarEx

ws2_32

WSAEnumProtocolsW
recvfrom
bind
getservbyname
ioctlsocket
gethostbyname
closesocket
WSAGetLastError
setsockopt

winmm

joyGetNumDevs
mciSendCommandA

winspool.drv

GetPrinterDataExA
WaitForPrinterChange
AddPrinterDriverW
OpenPrinterA
DeletePrinterDriverW
AddJobA
AddPortExA
GetPrinterDriverDirectoryW
AddPrintProcessorA

inetcomm

MimeOleObjectFromMoniker
HrDoAttachmentVerb
CreateRASTransport
MimeOleGetFileInfoW
MimeOleParseRfc822AddressW
MimeOleGetCodePageCharset
MimeOleSMimeCapAddCert
EssReceiptRequestEncodeEx
MimeOleCreateByteStream
MimeOleGenerateMID
MimeOleSetBodyPropA
MimeOleGetPropW
MimeOleFindCharset
CreatePOP3Transport
EssReceiptEncodeEx
MimeOleGetInternat
HrGetLastOpenFileDirectory
GetDllMajorVersion
MimeOleGetFileInfo

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.N
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aAUTTF
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZWQggJ
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.T
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ggLoS
Size: 1024B - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nfiGB
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LlPz
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tyy
Size: 512B - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

ws2_32

winmm

winspool.drv

inetcomm

Sections

.text Size: 11KB - Virtual size: 11KB

.N Size: 2KB - Virtual size: 45KB

.M Size: 1KB - Virtual size: 24KB

.aAUTTF Size: 512B - Virtual size: 7KB

.p Size: 4KB - Virtual size: 37KB

.ZWQggJ Size: 512B - Virtual size: 1KB

.T Size: 1024B - Virtual size: 24KB

.ggLoS Size: 1024B - Virtual size: 26KB

.data Size: 15KB - Virtual size: 15KB

.nfiGB Size: 2KB - Virtual size: 20KB

.LlPz Size: 2KB - Virtual size: 5KB

.tyy Size: 512B - Virtual size: 173KB

.rsrc Size: 169KB - Virtual size: 168KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.N
Size: 2KB - Virtual size: 45KB

.M
Size: 1KB - Virtual size: 24KB

.aAUTTF
Size: 512B - Virtual size: 7KB

.p
Size: 4KB - Virtual size: 37KB

.ZWQggJ
Size: 512B - Virtual size: 1KB

.T
Size: 1024B - Virtual size: 24KB

.ggLoS
Size: 1024B - Virtual size: 26KB

.data
Size: 15KB - Virtual size: 15KB

.nfiGB
Size: 2KB - Virtual size: 20KB

.LlPz
Size: 2KB - Virtual size: 5KB

.tyy
Size: 512B - Virtual size: 173KB

.rsrc
Size: 169KB - Virtual size: 168KB

.reloc
Size: 1KB - Virtual size: 1KB