14f05a8d66d854fd338b0b036dfca428f1be9ca1bcccbff5be90720025f620d2

Sharing

Copy URL Twitter E-mail

General

Target

14f05a8d66d854fd338b0b036dfca428f1be9ca1bcccbff5be90720025f620d2
Size

260KB
MD5

382ac47639b68f137fca5e1f289b5252
SHA1

faca3f2ce3f0c5053e89616718328a4f188e1e80
SHA256

14f05a8d66d854fd338b0b036dfca428f1be9ca1bcccbff5be90720025f620d2
SHA512

590f0f0ccfd4b9d855c843e904a70700bfee657594182e4a888130e5c99e3e28b8049ec3a76219629e241d8168307995b706d76998ac65dc72a8d34268c8506c
SSDEEP

6144:aSqMMlyKnC+/CCRJ39c+rlQH7N8KzHXX:a+MIsCaCUMN8wH

Score

N/A

Malware Config

Signatures

Files

14f05a8d66d854fd338b0b036dfca428f1be9ca1bcccbff5be90720025f620d2
.exe windows x86

7266599e640336ab9aabaf1efe710d83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ClientToScreen
GetPropA
SetFocus
WinHelpA
DrawIcon
TranslateMessage
SetMenuItemBitmaps
wsprintfA
LoadIconA
EnableWindow
GetMenuState
RemovePropA
GetSystemMetrics
CopyRect
SetWindowPos
ModifyMenuA
GetDlgCtrlID
GetKeyState
SetCursor
UnregisterClassA
SetWindowLongA
GetWindowPlacement
DispatchMessageA
CallNextHookEx
GetMenuCheckMarkDimensions
BeginPaint
GetNextDlgTabItem
GetClassInfoA
SetActiveWindow
RegisterClassA
GetSysColor
IsWindowEnabled
SetWindowTextA
DestroyWindow
GetLastActivePopup
GetWindowLongA
SetPropA
GetWindowTextA
GetDlgItem
UnhookWindowsHookEx
GetMenu
GetForegroundWindow
UpdateWindow
GetCapture
SendDlgItemMessageA
SystemParametersInfoA
PtInRect
IsIconic
TabbedTextOutA
EndPaint
GrayStringA
GetFocus
MapWindowPoints
GetWindowTextLengthA
EnableMenuItem
DdeEnableCallback
ValidateRect
GetClassLongA
IsDialogMessageA
GetMessagePos
SetForegroundWindow
CharUpperA
ExitWindowsEx
GetTopWindow
GetWindow
DrawTextA
GetMessageTime
DestroyMenu
DefWindowProcA
CreateWindowExA
GetClassNameA
ReleaseDC
IsWindowVisible
ShowWindow
GetClientRect
GetCursorPos
PeekMessageA
AdjustWindowRectEx
RegisterWindowMessageA
CallWindowProcA
PostQuitMessage
SetWindowsHookExA
GetMenuItemCount
IsWindow
GetDC
MessageBoxA
GetParent
LoadCursorA
GetSubMenu
PostMessageA
GetWindowRect
GetActiveWindow
SendMessageA
LoadBitmapA
GetSysColorBrush
CreateDialogIndirectParamA
GetMenuItemID
LoadStringA
CheckMenuItem
EndDialog
GetMessageA

advapi32

LsaICLookupNamesWithCreds
GetAclInformation
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
LsaEnumeratePrivileges
LockServiceDatabase
RegSetValueExA
RegOpenKeyExA
MSChapSrvChangePassword
AddUsersToEncryptedFile
SetSecurityDescriptorControl
ElfCloseEventLog
SystemFunction030
SystemFunction016
ElfOldestRecord
AddAccessDeniedAceEx

gdi32

GetDCPenColor
SelectClipRgn
GetRelAbs
CreateDIBitmap
PtInRegion
SelectObject
ExtTextOutA
Escape
SetBkColor
GdiPlayDCScript
OffsetViewportOrgEx
gdiPlaySpoolStream
DeleteDC
ScaleWindowExtEx
SaveDC
SetTextColor
RoundRect
TextOutA
RectVisible
GetDeviceCaps
EnumEnhMetaFile
RestoreDC
PtVisible
GetObjectA
DeleteObject
GetClipBox
CreateEllipticRgn
SetWindowExtEx
ScaleViewportExtEx
SetViewportOrgEx
SetViewportExtEx
SetMapMode
GetStockObject
CreateBitmap

kernel32

SystemTimeToTzSpecificLocalTime
GetVersion
InterlockedDecrement
TerminateProcess
SetCurrentDirectoryA
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
SetUnhandledExceptionFilter
SetStdHandle
WideCharToMultiByte
GetOEMCP
GlobalReAlloc
FindNextFileA
FindClose
UnlockFile
HeapReAlloc
FlushInstructionCache
SetConsoleCursorInfo
SetConsoleCursorPosition
DeleteFileA
FreeEnvironmentStringsA
GlobalUnlock
GetEnvironmentVariableA
HeapDestroy
FileTimeToLocalFileTime
lstrcpynA
GetVersionExA
GlobalAddAtomA
TlsSetValue
lstrcpyA
WriteFile
GlobalAlloc
GetSystemDirectoryA
LoadResource
GlobalHandle
CompareStringW
RaiseException
GlobalFindAtomA
Beep
DuplicateHandle
GlobalLock
MulDiv
GetThreadLocale
GlobalDeleteAtom
MapUserPhysicalPages
lstrcmpiA
InterlockedIncrement
GetTimeZoneInformation
LocalAlloc
GetCurrentThreadId
WritePrivateProfileStringA
IsBadWritePtr
EnterCriticalSection
SetEndOfFile
SetConsoleTextAttribute
InitializeSListHead
GetCurrentProcess
lstrcmpA
FindResourceA
Sleep
GetDriveTypeA
VirtualAlloc
ReadFile
ClearCommError
FreeLibrary
GetProcessVersion
IsDebuggerPresent
SetLastError
LockResource
RtlUnwind
GlobalFree
GetProcAddress
GlobalFlags
TlsGetValue
FatalExit
FlushFileBuffers
InitializeCriticalSection
lstrcatA
GetVolumeInformationA
ReleaseActCtx
HeapCreate
IsValidLocale
LocalFileTimeToFileTime
HeapSize
Toolhelp32ReadProcessMemory
GetCurrentDirectoryA
GetFileTime
GetCommandLineA
HeapFree
FileTimeToSystemTime
SetHandleCount
LocalReAlloc
GetWindowsDirectoryA
SetEnvironmentVariableA
GetStdHandle
GetCurrentThread
UnhandledExceptionFilter
CloseHandle
SetFileAttributesA
SystemTimeToFileTime
LeaveCriticalSection
GetFullPathNameA
SetConsoleScreenBufferSize
TlsAlloc
CompareStringA
LocalUnlock
GetModuleFileNameA
GetEnvironmentStringsW
IsBadReadPtr
SetSystemTime
SetFileTime
SetFilePointer
LoadLibraryA
FreeEnvironmentStringsW
GetCPInfo
LockFile
SetErrorMode
GetFileSize
VirtualFree
ReadProcessMemory
MultiByteToWideChar
GetEnvironmentStringsA
GetStringTypeW
GlobalGetAtomNameA
LocalFree
SetTimeZoneInformation
CreateFileA
GetACP
lstrlenA
GetFileType
GetStartupInfoA
ExitProcess
HeapAlloc
GetModuleHandleA
GetLastError
GetFileAttributesA
TlsFree
DeleteCriticalSection
FindFirstFileA
DosDateTimeToFileTime

comdlg32

GetFileTitleA
dwOKSubclass

winspool.drv

PlayGdiScriptOnPrinterIC
DeletePrinterIC
ClosePrinter
EndDocPrinter
DocumentPropertiesA
OpenPrinterA

winmm

waveInGetID
mxd32Message
midiOutReset
mmioSetInfo

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7266599e640336ab9aabaf1efe710d83

Headers

File Characteristics

Imports

user32

advapi32

gdi32

kernel32

comdlg32

winspool.drv

winmm

Sections

.text Size: 177KB - Virtual size: 176KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 33KB - Virtual size: 35KB

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 177KB - Virtual size: 176KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 33KB - Virtual size: 35KB

.rsrc
Size: 31KB - Virtual size: 30KB