f591296bc129ea1e9ca2b5810c26e893535151118a2473af68e5e3150b5857c9

Sharing

Copy URL

Twitter E-mail

General

Target

f591296bc129ea1e9ca2b5810c26e893535151118a2473af68e5e3150b5857c9
Size

14.7MB
MD5

80793e97399fb8d7dd9c5bfd893d9685
SHA1

357f50fe948fa0657fd163f89928252d8eab93c1
SHA256

f591296bc129ea1e9ca2b5810c26e893535151118a2473af68e5e3150b5857c9
SHA512

c36bee44f5bdd42f148fb4f0a6559c90c5fbc895a9fe7a80f3b343553d2dd61807dd076d0536e18ec5b30b1b6365de91df4452e659c8fd387e9344fd2f118598
SSDEEP

393216:ZcXxiK785aH32+FP5QU6/jsz+rxOtkG5RVTDVxiKf:ZcXxN7eiFPJHzoxOKG5rDVxNf

Score

N/A

Malware Config

Signatures

Files

f591296bc129ea1e9ca2b5810c26e893535151118a2473af68e5e3150b5857c9
.exe windows x86

6141dcfff92f4c785aa2c59d71fb7c3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
FreeLibrary
WaitForSingleObject
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
CreateEventA
lstrcmpA
GlobalAlloc
MulDiv
lstrcpynA
GlobalFlags
SizeofResource
LocalAlloc
LocalFree
GlobalHandle
GlobalReAlloc
LocalReAlloc
GetProcessVersion
GlobalDeleteAtom
GetThreadLocale
SetErrorMode
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
GetFileTime
FormatMessageA
lstrcpyA
lstrlenA
GlobalLock
SetStdHandle
ExitThread
CreateThread
GetProfileStringA
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
SetEnvironmentVariableA
CompareStringW
CompareStringA
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetProcAddress
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetLocalTime
GetTimeZoneInformation
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
_lclose
_llseek
_lwrite
_lread
_lopen
MoveFileExA
SetEndOfFile
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
ExitProcess
GetWindowsDirectoryA
OpenProcess
TerminateProcess
Sleep
GetCurrentDirectoryA
GetModuleFileNameA
FindClose
FindFirstFileA
CreateDirectoryA
GetFileSize
SetFilePointer
DeleteFileA
CloseHandle
WriteFile
ReadFile
CreateFileA
GetFileAttributesA
MultiByteToWideChar
SetFileAttributesA
GetVersion
WritePrivateProfileStringA

user32

PostThreadMessageA
GetCursorPos
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
GetClassInfoA
UnregisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
MessageBeep
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
wsprintfA
DispatchMessageA
TranslateMessage
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
GetWindowPlacement
GetWindowRect
CopyRect
GetDC
ReleaseDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
RegisterClipboardFormatA
CharUpperA
InvalidateRect
RegisterClassA
GetDlgItem
IsWindowEnabled
FindWindowA
GetWindowThreadProcessId
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
EnableWindow
IsWindowUnicode
GetMessageA
PeekMessageA
GetWindowLongA
SendMessageA
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
LoadStringA
DestroyMenu
GetSysColorBrush
LoadCursorA
InflateRect
GetDesktopWindow
PtInRect
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
MapDialogRect
SetWindowContextHelpId
SetCursor
GetForegroundWindow
PostQuitMessage
GetWindowTextLengthA
ValidateRect

gdi32

ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetViewportExtEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
PatBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
CoGetMalloc
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantClear
SysFreeString
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysAllocStringLen

Sections

.text
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6141dcfff92f4c785aa2c59d71fb7c3f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 220KB - Virtual size: 216KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 24KB - Virtual size: 55KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 220KB - Virtual size: 216KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 24KB - Virtual size: 55KB

.rsrc
Size: 16KB - Virtual size: 14KB