eb42055498870b27f82aaa353fd12a9201726b7522bd57d3e1c3b0c4a72b14af

Sharing

Copy URL Twitter E-mail

General

Target

eb42055498870b27f82aaa353fd12a9201726b7522bd57d3e1c3b0c4a72b14af
Size

449KB
MD5

c44176de412b486fd5aaef263e9fbc10
SHA1

fe4ff8b408e23c1a1066f8a3fea2f3a72190a51c
SHA256

eb42055498870b27f82aaa353fd12a9201726b7522bd57d3e1c3b0c4a72b14af
SHA512

324852cc82f591b16f514ed39594b6c5c260d40d8e5823106c490a05cefa692179ab183cfe6944098d18f36ad873c82bb09d6508d0ad8ca061613b4a770ee5f5
SSDEEP

6144:79UECWyfbjvIL1PuARhL/R3uCoCz5Ak4EFZO2S0DggAEP+:xUv1bjA1Pu0JduCnukbFhNAEP+

Score

N/A

Malware Config

Signatures

Files

eb42055498870b27f82aaa353fd12a9201726b7522bd57d3e1c3b0c4a72b14af
.exe windows x64

480ae6b3602554713005638b1d5b71a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LocalFree
FormatMessageA
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
InitializeCriticalSection
TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
MulDiv
GetOEMCP
FileTimeToSystemTime
SetErrorMode
GetTickCount
FileTimeToLocalFileTime
GetFileTime
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlLookupFunctionEntry
RtlUnwindEx
ExitProcess
RaiseException
RtlPcToFileHeader
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
Sleep
HeapSetInformation
HeapCreate
GetStdHandle
GetACP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetModuleFileNameW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GetCurrentProcessId
GlobalAddAtomA
SetLastError
GlobalUnlock
WritePrivateProfileStringA
FreeResource
GlobalFree
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
LoadLibraryA
GlobalLock
lstrcmpA
FreeLibrary
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
WriteFile
GetFileAttributesA
CloseHandle
SetFilePointer
GetVersion
CompareStringA
MultiByteToWideChar
CompareStringW
lstrlenA
ReadFile
GlobalAlloc
GetFileSize
GetLastError
CreateFileA
FindResourceA
LoadResource
LockResource
SizeofResource
GetCPInfo
WideCharToMultiByte

user32

TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
SetCapture
LoadCursorA
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetSysColorBrush
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
ReleaseDC
GetDC
LoadIconA
GetSystemMenu
AppendMenuA
IsIconic
GetSystemMetrics
CopyRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindow
DestroyMenu
ShowWindow
GetClientRect
DrawIcon
SendMessageA
SetTimer
EnableWindow
CharUpperA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
PostMessageA
PostQuitMessage
SetWindowPos
MapDialogRect
GetParent
SetWindowContextHelpId
SetForegroundWindow

comdlg32

GetOpenFileNameA
GetFileTitleA

okapi64

ord62
ord64
ord66
ord1
ord29
ord3
ord40

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

ExtSelectClipRgn
DeleteDC
GetStockObject
GetDeviceCaps
CreateBitmap
GetClipBox
SetBkColor
GetObjectA
ExtTextOutA
SaveDC
RestoreDC
SetMapMode
SetTextColor
DeleteObject
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
CreateRectRgnIndirect
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
TextOutA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries
OleInitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleUninitialize

oleaut32

VariantChangeType
VariantClear
SysAllocStringLen
SysStringLen
VariantInit
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
SysFreeString

Sections

.text
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

480ae6b3602554713005638b1d5b71a6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

okapi64

comctl32

shlwapi

oledlg

oleacc

gdi32

winspool.drv

advapi32

ole32

oleaut32

Sections

.text Size: 275KB - Virtual size: 275KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 13KB - Virtual size: 38KB

.pdata Size: 21KB - Virtual size: 20KB

.rsrc Size: 38KB - Virtual size: 37KB

.text
Size: 275KB - Virtual size: 275KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 13KB - Virtual size: 38KB

.pdata
Size: 21KB - Virtual size: 20KB

.rsrc
Size: 38KB - Virtual size: 37KB