9b6bf6b18292879d45cbd5ed83ac14f088484299fcdcf5d382a2acf5e6887131[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

9b6bf6b18292879d45cbd5ed83ac14f088484299fcdcf5d382a2acf5e6887131.exe
Size

3.1MB
MD5

1764990523d5dd6c063275abde06d3da
SHA1

fed5a57022bf7e25b5008b85b249c1046d28f6d0
SHA256

9b6bf6b18292879d45cbd5ed83ac14f088484299fcdcf5d382a2acf5e6887131
SHA512

b5f3aee2ef8e815ce20a0fa0ace3a1b8cedc6e01b9f0305702b619c6eb98e263c85c756b10869ada7b010ff5e25235d1cdd582a11b2656917cc37874afb0e9e9
SSDEEP

49152:amlQxq/9pIzOIlZKfB0rDM0GXCQuSJHC8zV:qc0l8WrzkCQugi0V

Score

1^/10

Malware Config

Signatures

Files

9b6bf6b18292879d45cbd5ed83ac14f088484299fcdcf5d382a2acf5e6887131.exe
.exe windows x86

81dcfb4077e724c86c444dcea6b08e8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

IsValidCodePage
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetPriorityClass
GetLocalTime
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DuplicateHandle
EnumResourceLanguagesW
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeResource
GetACP
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentThread
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandle
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDrives
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileIntW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetCPInfo
GetStdHandle
GetStringTypeA
GetStringTypeW
GetTempFileNameW
GetTempPathW
GetTimeZoneInformation
GetVersionExA
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LCMapStringA
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcmpA
lstrcmpW
lstrlenA
lstrlenW
MulDiv
MultiByteToWideChar
OpenProcess
RaiseException
ReadFile
RemoveDirectoryW
ResumeThread
SetConsoleTitleW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
GetCommandLineA
WritePrivateProfileStringW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
InitializeCriticalSection
EnterCriticalSection
GetTickCount
ExitProcess
LeaveCriticalSection
LoadLibraryA
GetStartupInfoW
WriteFile

user32

GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetLastActivePopup
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessagePos
GetMessageTime
GetMessageW
GetNextDlgTabItem
GetParent
GetPropW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
InvalidateRect
IsDialogMessageW
IsIconic
IsWindowEnabled
IsWindowVisible
IsZoomed
LoadBitmapW
LoadCursorW
GetClassNameW
LoadStringW
MapWindowPoints
MessageBoxW
ModifyMenuW
MoveWindow
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemBitmaps
SetPropW
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
WinHelpW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
LoadIconW
GetWindowDC
CharToOemW
CharUpperW
FillRect
ExitWindowsEx
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DrawMenuBar
DrawIcon
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogIndirectParamW
CopyRect
ClientToScreen
CheckMenuItem
GetActiveWindow

winspool.drv

XcvDataW
WritePrinter
StartPagePrinter
StartDocPrinterW
StartDocPrinterA
SetPrinterW
WaitForPrinterChange

advapi32

RegCloseKey
EnumDependentServicesW
GetTokenInformation
InitializeSecurityDescriptor
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
OpenServiceW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
StartServiceW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegQueryInfoKeyW
RegQueryValueExW
RegQueryValueW
RegSetValueExW
SetFileSecurityW
SetSecurityDescriptorDacl
RegOpenKeyExW
RegOpenKeyW

shell32

StrStrW

shlwapi

PathRemoveFileSpecW
PathStripToRootW
SHDeleteKeyW

Sections

.text
Size: 440KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fir310
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

81dcfb4077e724c86c444dcea6b08e8a

Headers

File Characteristics

Imports

msvcrt

version

kernel32

user32

winspool.drv

advapi32

shell32

shlwapi

Sections

.text Size: 440KB - Virtual size: 436KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 14.0MB

.tls Size: 4KB - Virtual size: 34B

.rsrc Size: 288KB - Virtual size: 288KB

.fir310 Size: 2.3MB - Virtual size: 2.3MB

.text
Size: 440KB - Virtual size: 436KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 14.0MB

.tls
Size: 4KB - Virtual size: 34B

.rsrc
Size: 288KB - Virtual size: 288KB

.fir310
Size: 2.3MB - Virtual size: 2.3MB