bddb33246da84f57cac0f9e72b0b7f289bcb2bf97d6bd6608799b536d7259cee

Sharing

Copy URL Twitter E-mail

General

Target

bddb33246da84f57cac0f9e72b0b7f289bcb2bf97d6bd6608799b536d7259cee
Size

341KB
MD5

1a2cfc827011ac23f1c515c5f672394f
SHA1

49f56bdb1b9155788f3dbbe181d61b0532f17a2c
SHA256

bddb33246da84f57cac0f9e72b0b7f289bcb2bf97d6bd6608799b536d7259cee
SHA512

8f678defecbc3065e7234bf34769e2d335be8d198feae6e3a51ff689c3ca54a75f00248192d78965b5fc032b91cf98d2d8568e82c244e4191ad0355afd9b03d0
SSDEEP

6144:sfRy5eeM3zcoZEVsQdoiid6tQJ6Z2UBqZOmJNH510qXjWPj:sZy5eeM340Z0oRt68GqD0

Score

1^/10

Malware Config

Signatures

Files

bddb33246da84f57cac0f9e72b0b7f289bcb2bf97d6bd6608799b536d7259cee
.exe windows x64

ef997d3767049b7f439739234bc217de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcessHeap
GetStartupInfoA
HeapSize
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetStdHandle
HeapSetInformation
HeapCreate
RtlVirtualUnwind
GetACP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetFileType
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
ExitProcess
HeapReAlloc
RtlPcToFileHeader
RaiseException
RtlCaptureContext
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwindEx
RtlLookupFunctionEntry
GetTickCount
SetErrorMode
GetCurrentProcess
FlushFileBuffers
MoveFileA
WritePrivateProfileStringA
GetThreadLocale
GetOEMCP
GetCPInfo
GetModuleFileNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
lstrcmpA
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
GetVersionExA
FreeResource
GlobalLock
GlobalUnlock
GetCurrentProcessId
GetModuleHandleA
GlobalGetAtomNameA
GlobalAddAtomA
SetLastError
WriteFile
SetFileTime
GetCurrentDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
CloseHandle
CreateFileA
SetFilePointer
CreateDirectoryA
FindFirstFileA
FindClose
lstrlenA
CompareStringA
lstrlenW
LoadLibraryA
GetProcAddress
GetFileAttributesA
Sleep
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
SetHandleCount
MultiByteToWideChar

user32

UnregisterClassA
RegisterClipboardFormatA
GetSysColorBrush
EndPaint
BeginPaint
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
LoadCursorA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetCursorPos
PostQuitMessage
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
PtInRect
GetDC
ReleaseDC
GetWindowRect
GetSystemMetrics
RegisterWindowMessageA
wsprintfA
UpdateWindow
EnableWindow
DestroyMenu
GetClassNameA
GetSysColor
WinHelpA
SetWindowPos
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
GetFocus
GetDlgItem
GetKeyState
GetDlgCtrlID
GetMenu
IsWindow
GetWindow
ShowWindow
GetWindowLongA
GetDesktopWindow
PostMessageA
GetLastActivePopup
CopyRect
GetClassInfoA
GetMenuItemCount
GetMenuItemID
GetSubMenu
SendMessageA
IsIconic
IsWindowVisible
SetActiveWindow
GetParent
GetCapture
PeekMessageA
SetCursor
LoadIconA
ValidateRect

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RestoreDC
SaveDC
GetStockObject
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
DeleteDC
GetObjectA
DeleteObject
SelectObject
SetMapMode

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef997d3767049b7f439739234bc217de

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

Sections

.text Size: 217KB - Virtual size: 216KB

.rdata Size: 74KB - Virtual size: 74KB

.data Size: 11KB - Virtual size: 34KB

.pdata Size: 16KB - Virtual size: 16KB

.rsrc Size: 21KB - Virtual size: 21KB

.text
Size: 217KB - Virtual size: 216KB

.rdata
Size: 74KB - Virtual size: 74KB

.data
Size: 11KB - Virtual size: 34KB

.pdata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 21KB - Virtual size: 21KB