e6261f1494b9e25e94865ab26fe5ed04561f3790c48bb4b9dc53ab8c3b3bf41f

Sharing

Copy URL Twitter E-mail

General

Target

e6261f1494b9e25e94865ab26fe5ed04561f3790c48bb4b9dc53ab8c3b3bf41f
Size

1.6MB
MD5

19c751e5c81f8bf0d8a3342af37f5b30
SHA1

3ebc8177866b6a811c8490711723908b3001c89d
SHA256

e6261f1494b9e25e94865ab26fe5ed04561f3790c48bb4b9dc53ab8c3b3bf41f
SHA512

fd8655f00b0065cf11ff545a7ef083b330a73936cd25dc93ca3b607f91d5a260591d408865edd952516bd02a617176493ae2664a3104f30134057ce4e660318b
SSDEEP

12288:KO48xIXpbBkDcgegHQiTfn7qgj6IYfRa8zSHbuITSpraGG40OPkl98HZrNv:KO48xIXZBWHpTDqgfwNSHbCIalPkSr

Score

1^/10

Malware Config

Signatures

Files

e6261f1494b9e25e94865ab26fe5ed04561f3790c48bb4b9dc53ab8c3b3bf41f
.exe windows x86

e5a4a70c4b5d74cf97fd6e63beeef5be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
SetErrorMode
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
GetVersion
SetLastError
GetLastError
GlobalDeleteAtom
GlobalFindAtomA
GetProcAddress
lstrcmpiA
GlobalGetAtomNameA
GetProcessVersion
lstrcmpA
GlobalFlags
InterlockedIncrement
WideCharToMultiByte
GetCPInfo
GetOEMCP
GetCurrentProcess
ReadFile
SetFilePointer
FlushFileBuffers
RtlUnwind
RaiseException
HeapSize
TerminateProcess
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadCodePtr
SetStdHandle
InterlockedExchange
FreeLibrary
GetModuleFileNameA
GetLocalTime
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetProcessHeap
GetCommandLineA
GetModuleHandleA
VirtualFree
VirtualAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
SetHandleCount
GetStartupInfoW
CloseHandle
WriteFile
CreateFileW
GetFileAttributesW
CreateDirectoryW
LoadLibraryA
GetCurrentThreadId
RtlMoveMemory
LocalSize
GetModuleHandleW
GlobalAddAtomA
MultiByteToWideChar

user32

GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
MapWindowPoints
PostMessageA
LoadIconA
GetMessagePos
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
GetLastActivePopup
GetForegroundWindow
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
LoadStringA
UnhookWindowsHookEx
SendMessageA
GetKeyState
CallNextHookEx
SetWindowsHookExA
GetMessageW
TranslateMessage
DispatchMessageW
GetSysColor
CreateWindowExW
LoadCursorW
GetWindow
GetWindowLongA
PeekMessageA
GetMessageA
DispatchMessageA
wsprintfA
MessageBoxA
KillTimer
SetTimer
GetInputState
GetClassNameA
GetAncestor
GetParent
DefWindowProcW
EndPaint
FillRect
BeginPaint
GetWindowThreadProcessId
SetFocus
SetForegroundWindow
BringWindowToTop
AttachThreadInput
IsZoomed
IsIconic
ShowWindow
SetWindowLongW
GetWindowLongW
DestroyIcon
CreateIconFromResource
RegisterClassExW
SetWindowLongA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

gdi32

GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
Escape
CreateBitmap
GetDeviceCaps
ExtTextOutA
TextOutA
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
DeleteObject
CreateSolidBrush
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comctl32

ord17

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e5a4a70c4b5d74cf97fd6e63beeef5be

Headers

File Characteristics

Imports

kernel32

user32

shell32

gdi32

winspool.drv

comctl32

Sections

.text Size: 144KB - Virtual size: 140KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 1.4MB - Virtual size: 1.4MB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 144KB - Virtual size: 140KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 16KB - Virtual size: 14KB