bb56e3bd73da6cbde5969009c7df73f835de13edc6607b3b0f5c87ee7422a04c

Sharing

Copy URL Twitter E-mail

General

Target

bb56e3bd73da6cbde5969009c7df73f835de13edc6607b3b0f5c87ee7422a04c
Size

332KB
MD5

661ec7f4910ac770b06af6a7df303e2c
SHA1

23c3fb54e28c17da7f3e1946515d7eb6da68cc96
SHA256

bb56e3bd73da6cbde5969009c7df73f835de13edc6607b3b0f5c87ee7422a04c
SHA512

4664ccd1cb1649ddae4d17fcc35753212eb9c5dbadfa1152a825af043816dfbe336591aa411d5b8319ccc4ac42c947e582d48f4c52dba745890c6e567d6e1f0b
SSDEEP

6144:wTkyhQC1P7P32NQbGu4pB4OTJ4Qupoy+Nl0jD:wTkyCC57/zCT5wo9UH

Score

N/A

Malware Config

Signatures

Files

bb56e3bd73da6cbde5969009c7df73f835de13edc6607b3b0f5c87ee7422a04c
.exe windows x86

cc2bb7809f3e7c1f443eb8c92d956c5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetGetConnectionW

kernel32

CreateProcessW
AddAtomW
ExitThread
DeleteAtom
GetAtomNameW
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
LockResource
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LocalAlloc
lstrlenW
GetLastError
GetACP
MultiByteToWideChar
FindResourceW
LoadResource
WaitForMultipleObjects
GetExitCodeThread
GetLocalTime
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocaleInfoW
GetTimeFormatW
IsBadReadPtr
lstrcatW
GetSystemTime
GetComputerNameW
lstrcpyW
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpW
LoadLibraryW
GetProcAddress
FreeLibrary
CreateEventW
CreateThread
Sleep
SetEvent
GetModuleFileNameW
GetCommandLineW
FreeEnvironmentStringsA
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
GetVersion
GetCommandLineA
GetModuleFileNameA
FreeEnvironmentStringsW
ExitProcess
GetStartupInfoA
GetModuleHandleA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapCreate
GetCPInfo
VirtualFree
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeW
RtlUnwind
WriteFile
LCMapStringA
LCMapStringW
VirtualAlloc
LoadLibraryA
GetStringTypeA

user32

InvalidateRect
IsWindowVisible
DestroyWindow
EnumWindows
PostMessageW
GetClassNameW
LoadMenuW
CreateWindowExW
SetWindowLongW
GetSysColor
UpdateWindow
ScreenToClient
LoadCursorW
GetSysColorBrush
RegisterClassExW
FindWindowW
DrawIconEx
KillTimer
FillRect
ShowWindow
SetForegroundWindow
SetTimer
LoadAcceleratorsW
SetWindowTextW
CharPrevW
DefWindowProcW
CharNextW
DestroyMenu
CreateDialogParamW
PeekMessageW
SetActiveWindow
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
GetDlgItem
GetDlgCtrlID
ChildWindowFromPoint
CheckRadioButton
SendMessageW
IsDlgButtonChecked
EnableWindow
CheckDlgButton
WinHelpW
MessageBoxW
EndDialog
SetDlgItemTextW
GetMenu
LoadStringW
DrawTextW
wsprintfW
DialogBoxParamW
IsIconic
GetWindowRect
PostQuitMessage
SetWindowPos
GetClientRect
SetFocus
BeginPaint
GetWindowLongW
EndPaint
GetSystemMetrics
AppendMenuW
GetSystemMenu
EnableMenuItem

gdi32

LineTo
CreateCompatibleDC
SelectObject
CreatePen
CreatePalette
DeleteObject
DeleteDC
CreateDIBitmap
BitBlt
SetMapMode
GetMapMode
RealizePalette
SelectPalette
MoveToEx
CreateCompatibleBitmap
PatBlt
CreateSolidBrush
GetTextMetricsW
SetTextColor
SetBkMode
CreateFontIndirectW
SelectClipRgn
CreateRectRgn
SetBkColor
GetStockObject

winspool.drv

GetPrinterDriverDirectoryW
FindFirstPrinterChangeNotification
FindNextPrinterChangeNotification
FreePrinterNotifyInfo
FindClosePrinterChangeNotification
GetJobW
SetJobW
EnumJobsW
GetPrinterW
OpenPrinterW
GetPrinterDriverW
ClosePrinter
SetPrinterDataW

advapi32

RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
InitializeSecurityDescriptor
RegQueryInfoKeyW
GetUserNameW
SetSecurityDescriptorDacl

imm32

ImmAssociateContext

winmm

PlaySoundW
waveOutGetNumDevs

comctl32

ord17
CreateStatusWindowW

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 839B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 199KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cc2bb7809f3e7c1f443eb8c92d956c5c

Headers

File Characteristics

Imports

mpr

kernel32

user32

gdi32

winspool.drv

advapi32

imm32

winmm

comctl32

Sections

.text Size: 58KB - Virtual size: 57KB

.rdata Size: 1024B - Virtual size: 839B

.data Size: 37KB - Virtual size: 44KB

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 31KB - Virtual size: 30KB

.tc Size: 199KB - Virtual size: 200KB

.text
Size: 58KB - Virtual size: 57KB

.rdata
Size: 1024B - Virtual size: 839B

.data
Size: 37KB - Virtual size: 44KB

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 31KB - Virtual size: 30KB

.tc
Size: 199KB - Virtual size: 200KB