a84c4580c5aaed4e16d6ee19f61e55e42c4800a49f76f99161cd16ed692ea533

Sharing

Copy URL Twitter E-mail

General

Target

a84c4580c5aaed4e16d6ee19f61e55e42c4800a49f76f99161cd16ed692ea533
Size

1.0MB
MD5

618668d584644c63fe3110a91ee4b1d1
SHA1

1b1f9290009a41a3de1583483b140f72bd771f7c
SHA256

a84c4580c5aaed4e16d6ee19f61e55e42c4800a49f76f99161cd16ed692ea533
SHA512

d204d99511de261ddfec3f021751477672f9979a9d79504d7f05e30dd9dd18545f42e46a5077db9d3285350806267f142ad2a583f9f1d83304d84efccc8ba857
SSDEEP

24576:KDNSWx4nSGhcv8MrvmZP99ZRNA1rOIBC9BFO0xcAvafGHgzn:WN14nP45q9ZU1699B8mWf0w

Score

N/A

Malware Config

Signatures

Files

a84c4580c5aaed4e16d6ee19f61e55e42c4800a49f76f99161cd16ed692ea533
.exe windows x86

dc52809d93e841acfa4ee1f2e2953b00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
CompareStringW
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
GetDriveTypeA
GetOEMCP
SetEnvironmentVariableA
HeapAlloc
FindResourceA
GlobalAddAtomA
GetProfileStringA
HeapFree
RaiseException
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetStartupInfoW
GetTickCount
GetCurrentDirectoryW
SetErrorMode
SizeofResource
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrcmpiA
GetCurrentThread
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesW
lstrcmpiW
GetThreadLocale
GetFullPathNameW
lstrcpynW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GlobalFree
MulDiv
SetLastError
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
lstrlenA
FindResourceW
LoadResource
LockResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryA
IsValidCodePage
GetSystemDefaultLangID
GetACP
GetSystemInfo
CreateMutexW
ReleaseMutex
GetPrivateProfileStringW
FormatMessageW
GetVersion
GetPrivateProfileIntW
MultiByteToWideChar
WritePrivateProfileStringW
lstrcmpW
GetVolumeInformationW
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleHandleW
lstrcatW
CreateFileW
CloseHandle
FindNextFileW
FindFirstFileW
FindClose
LocalUnlock
LocalFree
GetVersionExW
WideCharToMultiByte
GlobalAlloc
GetLastError
GlobalLock
GlobalUnlock
lstrcpyW
GetModuleFileNameW
CompareStringA
lstrlenW

user32

RegisterClipboardFormatW
PostThreadMessageW
GetDlgItemInt
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
PeekMessageW
DispatchMessageW
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
GetTopWindow
MessageBoxW
IsChild
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
DestroyWindow
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowPos
IntersectRect
SystemParametersInfoW
GetWindowRect
GetFocus
RegisterWindowMessageW
IsWindow
GetWindowThreadProcessId
AttachThreadInput
IsWindowVisible
GetSystemMenu
DeleteMenu
AppendMenuW
GetDC
SetForegroundWindow
TrackPopupMenu
GetForegroundWindow
GetMenuItemID
SetMenuDefaultItem
KillTimer
IsIconic
GetSystemMetrics
DrawIcon
FindWindowW
RegisterHotKey
LoadIconW
GetKeyState
LoadBitmapW
SetWindowLongW
LoadCursorW
SetTimer
GetWindowDC
ReleaseDC
GetAsyncKeyState
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
PostMessageW
DestroyCursor
RedrawWindow
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
LoadMenuW
GetSubMenu
DrawTextExW
wsprintfW
EnableWindow
GrayStringW
DrawTextW
TabbedTextOutW
LoadStringW
SetCursor
GetWindowLongW
CopyRect
FrameRect
InflateRect
FillRect
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableW
CharNextW
GetWindowPlacement
GetSysColor
OffsetRect
SendMessageW
DrawStateW
DrawFocusRect
GetActiveWindow
GetParent
GetCapture
SetCapture
GetClientRect
PtInRect
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
LoadImageW
InvalidateRect
ReleaseCapture
GetSysColorBrush
GetDesktopWindow
GetClassNameW
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
GetMessageW
TranslateMessage
ValidateRect
DestroyMenu
CharUpperW
EndDialog
CreateDialogIndirectParamW
EndPaint
BeginPaint
ClientToScreen
WindowFromPoint
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
UnregisterHotKey
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
GetCursorPos
SetDlgItemInt

gdi32

GetClipBox
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
DPtoLP
CreateDCW
LPtoDP
EnumFontsW
CreateFontW
GetTextExtentPoint32W
PatBlt
GetMapMode
CreatePen
Rectangle
GetObjectW
StretchBlt
EnumFontFamiliesExW
CreateSolidBrush
GetTextMetricsW
GetTextColor
GetBkColor
CreateFontIndirectW
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
DeleteObject

comdlg32

ChooseColorW
GetFileTitleW
PrintDlgW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW

shell32

ShellExecuteW
Shell_NotifyIconW

comctl32

ImageList_Draw
ord17
ImageList_Destroy
ImageList_LoadImageW

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysAllocString
VariantCopy
VariantClear
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
VariantChangeType

Sections

.text
Size: 372KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 504KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc52809d93e841acfa4ee1f2e2953b00

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 372KB - Virtual size: 369KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 108KB - Virtual size: 127KB

.rsrc Size: 504KB - Virtual size: 501KB

.text
Size: 372KB - Virtual size: 369KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 108KB - Virtual size: 127KB

.rsrc
Size: 504KB - Virtual size: 501KB