a8c9d0dceb5c4deadbc2c9baa876889998258e0670393e3e6eb67c3b2a244ce0

Sharing

Copy URL Twitter E-mail

General

Target

a8c9d0dceb5c4deadbc2c9baa876889998258e0670393e3e6eb67c3b2a244ce0
Size

2.2MB
MD5

9654340860699c6f43f72d296a5fe09e
SHA1

abe11c075ed08ecb8e90ba36ff5b15e46cf20238
SHA256

a8c9d0dceb5c4deadbc2c9baa876889998258e0670393e3e6eb67c3b2a244ce0
SHA512

1c6c388b797fb4939b1d164f0f4fdc60503245bf82516eabfa9fdc320284d861037e65c0d76cc32959fab2f194566206935efde6722491cf697ce043b405d7ae
SSDEEP

24576:ydgNLfm9MplGBpnYaYltY05+y1Yjq9AOsHyRKbN5EbUyPxkzrozF/M0XlT9i01/f:uEl4nYpU0ujq9AW9i01Pqq5g0

Score

N/A

Malware Config

Signatures

Files

a8c9d0dceb5c4deadbc2c9baa876889998258e0670393e3e6eb67c3b2a244ce0
.exe windows x86

eb69427ced748a3e43a13d5dcb08ccb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateToolbarEx
ord17
InitCommonControlsEx
PropertySheetA

wxl_dll

WRITE_WMF_FILE
deal_pkpm_layer3d
deal_pkpm_ltype
deal_pkpm_style
WRITE_EMF_FILE
deal_pkpm_layer

nrclient

ord2
ord6
ord5
ord4
ord9
ord8
ord10
ord7

kernel32

FindClose
MoveFileA
UnlockFile
FindFirstFileA
GetVolumeInformationA
GetTickCount
GetFileSize
GetFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
RtlUnwind
GetStartupInfoA
ExitProcess
HeapFree
TerminateProcess
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetSystemTime
GetLocalTime
UnhandledExceptionFilter
CopyFileA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapAlloc
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
DuplicateHandle
LockFile
GetCurrentProcess
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetCurrentThread
SetLastError
FreeLibrary
GetExitCodeProcess
GetEnvironmentVariableA
GetComputerNameA
GetCurrentProcessId
GetProfileStringA
RaiseException
DebugBreak
FormatMessageA
CloseHandle
GetStdHandle
GetLastError
WaitForSingleObject
InterlockedExchange
ReleaseMutex
GetLogicalDrives
GetDriveTypeA
SetCurrentDirectoryA
FindNextFileA
GetSystemTimeAsFileTime
FlushFileBuffers
SizeofResource
GetOEMCP
GetCPInfo
GetCurrentDirectoryA
GetThreadLocale
GetProcessVersion
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalReAlloc
GlobalFlags
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
InitializeCriticalSection
LocalFree
WideCharToMultiByte
MulDiv
MultiByteToWideChar
GetVersion
lstrlenA
InterlockedIncrement
GlobalAddAtomA
lstrcatA
GlobalGetAtomNameA
GlobalUnlock
GlobalFindAtomA
lstrcpyA
LockResource
FindResourceA
LoadResource
GlobalFree
InterlockedDecrement
GlobalDeleteAtom
GlobalLock
GlobalAlloc
GetCommandLineA
lstrcmpA
lstrcmpiA
GetACP
SetConsoleCtrlHandler
SetErrorMode
TlsSetValue
TlsAlloc
TlsGetValue
CreateProcessA
WriteFile
Sleep
DeleteFileA
SetThreadPriority
GetVersionExA
GetTempPathA
GetFileInformationByHandle
GetFullPathNameA
SetFilePointer
GetTempFileNameA
GetFileType
CreateMutexA
SetEndOfFile
ReadFile
CreateFileA
GetCurrentThreadId
GetModuleHandleA
VirtualQuery
CreateFileMappingA
MapViewOfFile
GetProcAddress
GetModuleFileNameA
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapCreate

user32

LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
LoadStringA
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
ShowScrollBar
SetScrollRange
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
DialogBoxIndirectParamA
FillRect
GetClassLongA
SetPropA
GetPropA
GetCursor
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
ShowCursor
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
GetDlgItem
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
LoadBitmapA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
GetWindowLongA
EnableWindow
TrackPopupMenuEx
SetParent
CreatePopupMenu
DefWindowProcA
GetDlgCtrlID
EndDialog
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
AppendMenuA
SendMessageA
LoadIconA
DestroyWindow
SetCursorPos
CreateMenu
DrawMenuBar
PostThreadMessageA
RegisterClipboardFormatA
InflateRect
CharUpperA
InvalidateRect
SetMenu
TranslateAcceleratorA
GetDialogBaseUnits
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
DeleteMenu
PtInRect
GetClassNameA
GetDesktopWindow
CallWindowProcA
RemovePropA
SetScrollPos
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
UnregisterClassA

gdi32

DeleteDC
SetBkColor
StartDocA
SetTextColor
SaveDC
CreateBitmap
GetTextExtentPointA
GetClipBox
GetObjectA
SetROP2
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
SetTextAlign
DeleteObject
RestoreDC
GetViewportExtEx
GetWindowExtEx
GetDeviceCaps
CreateSolidBrush
CreatePen
RectVisible
TextOutA
PtVisible
Escape
GetTextColor
ExtTextOutA
DPtoLP
LPtoDP
GetBkColor
GetTextMetricsA
GetTextExtentPoint32A
PatBlt
GetMapMode
CreateRectRgnIndirect
BitBlt
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
CreateDIBitmap
GetDIBits
SetPixelV
SetDIBits
Polygon
EndDoc
Rectangle
StartPage
SetAbortProc
EndPage
GetStockObject
SelectObject
SetBkMode

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
ChooseFontA
PrintDlgA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA

oledlg

ord8

ole32

CoTaskMemFree
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CLSIDFromProgID
CoRegisterMessageFilter
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromString
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject

olepro32

ord253

oleaut32

SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb69427ced748a3e43a13d5dcb08ccb8

Headers

File Characteristics

Imports

comctl32

wxl_dll

nrclient

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 184KB - Virtual size: 3.9MB

.tls Size: 4KB - Virtual size: 56B

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 184KB - Virtual size: 3.9MB

.tls
Size: 4KB - Virtual size: 56B

.rsrc
Size: 16KB - Virtual size: 13KB