336ee6149cce8c2fd600a926ac910f1616815afee54fd96aec314db87f989535

Sharing

Copy URL Twitter E-mail

General

Target

336ee6149cce8c2fd600a926ac910f1616815afee54fd96aec314db87f989535
Size

496KB
MD5

e906cddf7a6c3ea65ccca94998c74690
SHA1

8bceb2bd354d06dfd100b286ef9000424c4eab4f
SHA256

336ee6149cce8c2fd600a926ac910f1616815afee54fd96aec314db87f989535
SHA512

45d9a7ccaabcdbb5a60e9711a0261f1790b025b9a8b20aa91496185cdde5d89a99efa191a736c7ed26988e0c03382c043368454accccc46228b924786f0f5228
SSDEEP

12288:4YD56Gwnq6XIELbnQBny0ZYlXbueDrtN1DPaJdS:X4V/X/90ZYZu8N1jd

Score

N/A

Malware Config

Signatures

Files

336ee6149cce8c2fd600a926ac910f1616815afee54fd96aec314db87f989535
.exe windows x86

be5ff81624f3046229159a0ec1c6ebba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsRectEmpty
UnhookWindowsHookEx
CopyRect
SetRectEmpty
IsDialogMessageW
DestroyMenu
EndPaint
FrameRect
SetClipboardData
SetScrollInfo
GetClipboardData
DrawEdge
EndDialog
GetSystemMetrics
DrawFocusRect
GetMessagePos
SetTimer
BeginPaint
IsClipboardFormatAvailable
GetActiveWindow
SetMenu
RegisterClassExW
IsWindowEnabled
GetDesktopWindow
GetIconInfo
CallNextHookEx
DrawTextW
SetCursor
DestroyIcon
SetWindowTextW
ShowWindow
SetFocus
GetMenu
IsMenu
ScreenToClient
LoadCursorW
TabbedTextOutW
CreateDialogIndirectParamW
BeginDeferWindowPos
SetCapture
GetSysColorBrush
TranslateMessage
InvalidateRect
WindowFromPoint
IsWindowVisible
CreateWindowExW
IsZoomed
GetDlgCtrlID
RegisterClassW
GetTopWindow
MapDialogRect
GetWindowTextA
IntersectRect
FillRect
GetCursorPos
GrayStringW
SystemParametersInfoW
LoadIconW
GetMenuItemCount
SetParent
AppendMenuW
LoadStringW
OpenClipboard
DefWindowProcA
LoadBitmapW
GetScrollPos
GetWindow
GetWindowPlacement
MapWindowPoints
InflateRect
GetWindowThreadProcessId
IsIconic
MoveWindow
PostQuitMessage
CloseClipboard
DrawFrameControl
CreateMenu
DeferWindowPos
GetWindowLongW
GetWindowTextW
UnpackDDElParam
GetClientRect
GetCapture
SetMenuDefaultItem
SetMenuItemInfoW
GetDlgItem
SetWindowPos
MessageBeep
GetWindowRect
RedrawWindow
EnableWindow
KillTimer
ReleaseDC
EndDeferWindowPos
GetWindowDC
DestroyWindow
UnregisterClassA
GetScrollInfo
GetParent
AdjustWindowRectEx
GetMessageW
SetRect
ShowScrollBar
SetActiveWindow
GetDCEx

ole32

CLSIDFromProgID
OleRun
CoGetClassObject
CoTaskMemRealloc
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
StringFromCLSID
DoDragDrop
OleUninitialize
OleInitialize

advapi32

RegOpenKeyExW
RegFlushKey
RegEnumKeyExW
RegDeleteValueA
RegQueryValueExA
ControlService
RegCloseKey
FreeSid
RegOpenKeyA
RegSetValueExA
RegDeleteKeyA
RegQueryValueExW
RegDeleteKeyW
CloseServiceHandle
RegSetValueExW
QueryServiceStatus
GetTokenInformation
InitializeSecurityDescriptor
RegCreateKeyExA
RegEnumKeyExA
AllocateAndInitializeSid
OpenProcessToken
RegOpenKeyExA
DeleteService

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

GetModuleFileNameW
GetExitCodeThread
GetModuleFileNameA
CreateThread
GetSystemTimeAsFileTime
FindClose
GetOEMCP
SetFilePointer
LocalAlloc
LocalReAlloc
FindResourceW
GetFileTime
GetCurrentThread
ExitProcess
GetStringTypeA
WriteFile
IsValidLocale
GetWindowsDirectoryW
lstrcmpiW
SetHandleCount
GetCPInfo
GetThreadLocale
GetCurrentProcessId
HeapDestroy
FreeLibrary
DuplicateHandle
HeapSize
CreateFileA
GetCurrentDirectoryW
lstrcatW
InitializeCriticalSection
LCMapStringA
GetStartupInfoW
GlobalDeleteAtom
GlobalHandle
FreeEnvironmentStringsW
lstrcmpiA
RtlUnwind
GlobalSize
GetCommandLineA
CreateProcessA
GetProcessHeap
GetLocaleInfoW
GetConsoleOutputCP
CreateFileMappingW
SetStdHandle
InterlockedDecrement
MoveFileW
CreateMutexW
GetLocalTime
CopyFileW
HeapAlloc
EnterCriticalSection
InterlockedCompareExchange
LockResource
CreateEventW
CompareStringW
DeleteFileA
WideCharToMultiByte
LocalFileTimeToFileTime
FileTimeToSystemTime
SizeofResource
SetEvent
CreateDirectoryA
TerminateProcess
SetFileAttributesW
lstrcmpA
GetCurrentProcess
IsValidCodePage
VirtualQuery
SetLastError
GetSystemInfo
GetEnvironmentStrings
WaitForSingleObject
LocalFree
GetStringTypeW
lstrcpyA
UnlockFile
GetConsoleMode
TlsSetValue
GetFileSize
WriteConsoleW
GetConsoleCP
VirtualAlloc
FileTimeToLocalFileTime
GetModuleHandleW
FreeEnvironmentStringsA
LoadLibraryW
GetFullPathNameW
GetCommandLineW
GlobalFree
GetEnvironmentStringsW
InterlockedExchange
IsDebuggerPresent
CreateFileW
LoadResource
SetErrorMode
QueryPerformanceCounter
GlobalLock
LCMapStringW
FreeResource
GetCurrentThreadId
GlobalUnlock
WriteConsoleA
GetTimeFormatA
ExitThread
GetLocaleInfoA
lstrlenA
SetEndOfFile
GetTimeZoneInformation
DebugBreak
CompareStringA
GetACP
DeleteCriticalSection
GetDriveTypeA
GetDateFormatA
GetProcAddress
GlobalAlloc
HeapReAlloc
RaiseException
TlsFree
ResumeThread
FlushFileBuffers
GetStartupInfoA
VirtualFree
TlsAlloc
lstrlenW
GetTickCount
GetStdHandle
UnhandledExceptionFilter
GetExitCodeProcess
GetCurrentDirectoryA
GetUserDefaultLCID
GetModuleHandleA
GlobalReAlloc
LoadLibraryA
lstrcpyW
InterlockedIncrement
GetFileType
SystemTimeToFileTime
LeaveCriticalSection
TlsGetValue
HeapCreate
SetThreadPriority
ReadFile
SetUnhandledExceptionFilter
MultiByteToWideChar
GetSystemTime
Sleep
SetEnvironmentVariableA
CloseHandle
GetVersion
GetLastError
GetVersionExW
HeapFree
LockFile
GetVersionExA
WaitForMultipleObjects

oleaut32

LoadTypeLi

gdi32

DeleteDC
CreateDCW
GetObjectW
GetDeviceCaps

winspool.drv

ord204
OpenPrinterA

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be5ff81624f3046229159a0ec1c6ebba

Headers

File Characteristics

Imports

user32

ole32

advapi32

version

kernel32

oleaut32

gdi32

winspool.drv

Sections

.text Size: 112KB - Virtual size: 108KB

.rdata Size: 276KB - Virtual size: 272KB

.data Size: 76KB - Virtual size: 78KB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 112KB - Virtual size: 108KB

.rdata
Size: 276KB - Virtual size: 272KB

.data
Size: 76KB - Virtual size: 78KB

.rsrc
Size: 28KB - Virtual size: 25KB