25b19bd50d2088a12fff703b0569e85ecf3f289bf5cc75ae177917d8938653ce

Sharing

Copy URL

Twitter E-mail

General

Target

25b19bd50d2088a12fff703b0569e85ecf3f289bf5cc75ae177917d8938653ce
Size

208KB
MD5

33f19b54f93144dd35e13cc8f76c1b55
SHA1

c4c4edd21e61ef3af5cb1515b6f9718b0c6db8d8
SHA256

25b19bd50d2088a12fff703b0569e85ecf3f289bf5cc75ae177917d8938653ce
SHA512

baee1e3d54ae95deb12c6af6ccc6217e5f423ec49ca05330e7ab369c2aca1b1164a13849026efe28f18587f69c60e164e0d38788f793e5c40f484161ff502e29
SSDEEP

3072:ShWdReufCrsXKOmVWmpvjVQJRrmVrNEkyczSZZ3gTUQXHZJWlR:jHahjVYiV+X/0UQD

Score

N/A

Malware Config

Signatures

Files

25b19bd50d2088a12fff703b0569e85ecf3f289bf5cc75ae177917d8938653ce
.exe windows x86

3b0bdaf12af41121623d562383569ff8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiCreateDeviceInfoListExA
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInfoA
SetupDiGetDeviceInfoListDetailA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupCopyOEMInfA
SetupDiSetDeviceRegistryPropertyA

gdi32

GetObjectA
SetViewportExtEx
SaveDC
SetViewportOrgEx
SetTextColor
SetWindowExtEx
PtVisible
DeleteObject
SetMapMode
ScaleWindowExtEx
SelectObject
RectVisible
ScaleViewportExtEx
GetStockObject
Escape
SetBkColor
DeleteDC
GetClipBox
TextOutA
OffsetViewportOrgEx
CreateBitmap
RestoreDC
ExtTextOutA

kernel32

LoadLibraryA
GetVersion
TlsGetValue
GlobalFree
WriteFile
lstrcmpA
LeaveCriticalSection
GetModuleHandleA
GetCommandLineA
FreeEnvironmentStringsW
VirtualFree
GlobalAlloc
GlobalReAlloc
lstrcpynA
DeleteCriticalSection
RaiseException
FreeLibrary
LCMapStringA
HeapDestroy
HeapAlloc
MultiByteToWideChar
FlushFileBuffers
lstrcmpiA
GetStringTypeW
ExitProcess
IsBadWritePtr
LocalFree
HeapSize
IsBadCodePtr
TlsSetValue
GetCurrentThreadId
GetStartupInfoA
GlobalFlags
GetEnvironmentStringsA
GetProcAddress
GlobalFindAtomA
RtlUnwind
InterlockedDecrement
InitializeCriticalSection
HeapReAlloc
GlobalUnlock
FreeEnvironmentStringsA
SetFilePointer
GlobalLock
GetCPInfo
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
lstrcpyA
SetHandleCount
lstrcatA
LocalReAlloc
IsBadReadPtr
GetCurrentProcess
HeapCreate
GetLocaleInfoW
GetLastError
TerminateProcess
WideCharToMultiByte
LocalAlloc
GetModuleFileNameA
lstrlenA
GetLocaleInfoA
HeapFree
GlobalAddAtomA
LCMapStringW
GetACP
InterlockedIncrement
SetStdHandle
VirtualAlloc
GlobalHandle
TlsAlloc
GetStringTypeA
GlobalGetAtomNameA
GetOEMCP
UnhandledExceptionFilter
CloseHandle
GlobalDeleteAtom
SetLastError
GetEnvironmentStringsW
EnterCriticalSection

user32

AdjustWindowRectEx
EnableWindow
DestroyWindow
ClientToScreen
IsWindowEnabled
SetWindowsHookExA
TabbedTextOutA
DestroyMenu
WinHelpA
UnhookWindowsHookEx
LoadBitmapA
RegisterClassA
GetClassNameA
GetMenuState
SetWindowTextA
GetClassLongA
wsprintfA
GetForegroundWindow
SetFocus
GetKeyState
SystemParametersInfoA
IsIconic
GetSubMenu
GetParent
PostMessageA
GetFocus
GrayStringA
SetPropA
LoadStringA
GetMenuItemID
DefWindowProcA
PtInRect
GetSysColor
CopyRect
GetMessageTime
GetDC
PeekMessageA
SetWindowPos
LoadIconA
GetCapture
GetLastActivePopup
SetForegroundWindow
GetMenu
RemovePropA
GetWindowTextA
EnableMenuItem
PostQuitMessage
ModifyMenuA
CallWindowProcA
GetMenuItemCount
MessageBoxA
GetMessagePos
ReleaseDC
MapWindowPoints
DispatchMessageA
GetWindowPlacement
LoadCursorA
GetClientRect
GetMenuCheckMarkDimensions
CharNextA
GetSysColorBrush
GetWindowLongA
DrawTextA
SetWindowLongA
GetTopWindow
SendMessageA
GetClassInfoA
RegisterWindowMessageA
GetWindowRect
GetDlgCtrlID
SetMenuItemBitmaps
CallNextHookEx
GetDlgItem
GetNextDlgTabItem
CreateWindowExA
GetPropA
GetWindow

comctl32

ord17

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b0bdaf12af41121623d562383569ff8

Headers

File Characteristics

Imports

winspool.drv

setupapi

gdi32

kernel32

user32

comctl32

Sections

.text Size: 168KB - Virtual size: 166KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 920B

.text
Size: 168KB - Virtual size: 166KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 920B