2375f2749920eabd35a0bab9f3a271515159adbaa1751978317c56f5a65a2d6c

Sharing

Copy URL Twitter E-mail

General

Target

2375f2749920eabd35a0bab9f3a271515159adbaa1751978317c56f5a65a2d6c
Size

228KB
MD5

55e5e2fa78540889670103403363bfb7
SHA1

5ade3f8208a5e28da4ef1a0c1410c065ddbb8cd9
SHA256

2375f2749920eabd35a0bab9f3a271515159adbaa1751978317c56f5a65a2d6c
SHA512

748716412e01f6378975a22a91668671b3f61cf8635a1cda8c5f7dcff814e8f2b4f4a8c6d33d18c2e592d06f729871efc064b9a03d23c976a07890e18019af23
SSDEEP

3072:tdt6Fd/Xdc31yI51F5/rj+dotPjLUqTOa3ZPa92cKdSri/5c5qHS0RBnfTDP0Oni:rwPo1yOZ2kSi5csy0RxTz0OnrbkH

Score

N/A

Malware Config

Signatures

Files

2375f2749920eabd35a0bab9f3a271515159adbaa1751978317c56f5a65a2d6c
.exe windows x86

60ae292b7499b8caf8634c1214e4ed78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
RtlUnwind
GetStartupInfoA
TerminateProcess
HeapFree
HeapAlloc
GetTimeZoneInformation
RaiseException
HeapReAlloc
HeapSize
Sleep
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FlushFileBuffers
ExitProcess
SetHandleCount
GetCommandLineA
ReadFile
GetModuleHandleA
WritePrivateProfileStringW
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetDriveTypeA
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrlenA
lstrlenW
InterlockedDecrement
InterlockedIncrement
FindNextFileW
lstrcpyW
FindFirstFileW
GetLastError
SetLastError
FindClose
GetCommandLineW
SetFilePointer
WriteFile
GetCurrentProcess
FreeLibrary
GetProcessVersion
LoadLibraryA
GetVersion
GlobalAddAtomW
GlobalFindAtomW
GetStdHandle
GetCurrentDirectoryW
GetProcAddress
ExpandEnvironmentStringsW
GetModuleHandleW
GetFileType
GetWindowsDirectoryW
GlobalFlags
lstrcmpiW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
CloseHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynW
lstrcatW
SetErrorMode
GetModuleFileNameW
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
LocalFree
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
GetVersionExA
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExW
InterlockedExchange

user32

GetCapture
GetTopWindow
WinHelpW
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconW
ShowWindow
LoadCursorW
GetSysColorBrush
DestroyMenu
GetMenuItemID
GetDlgItem
DefWindowProcW
DestroyWindow
CreateWindowExW
SetPropW
GetPropW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongW
GetSubMenu
RegisterWindowMessageW
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetSystemMetrics
GrayStringW
DrawTextW
TabbedTextOutW
ReleaseDC
GetDC
GetMenuItemCount
UnhookWindowsHookEx
GetWindowTextW
SetWindowTextW
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameW
LoadBitmapW
GetMenuState
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
SetCursor
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageW
GetCursorPos
SetWindowsHookExW
GetMenu
wsprintfW
LoadStringW
RemovePropW
GetMessageTime
SetWindowPos
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
SendMessageW
MessageBoxW
EnableWindow
PostMessageW
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuW
GetMenuCheckMarkDimensions

gdi32

DeleteObject
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
RectVisible
TextOutW
PtVisible
Escape
ExtTextOutW
GetObjectW
DeleteDC
CreateBitmap

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegisterEventSourceW
DeregisterEventSource
ReportEventW
RegCreateKeyExW

comctl32

ord17

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.krdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

60ae292b7499b8caf8634c1214e4ed78

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 8KB - Virtual size: 4KB

.krdata Size: 76KB - Virtual size: 76KB

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 8KB - Virtual size: 4KB

.krdata
Size: 76KB - Virtual size: 76KB