195a6ef11980deeb7521585df611c45124983f2267d6f7abf329d4bf9e086951

Sharing

Copy URL

Twitter E-mail

General

Target

195a6ef11980deeb7521585df611c45124983f2267d6f7abf329d4bf9e086951
Size

431KB
MD5

1a0af8e5019f6f916b15e6af5771dd20
SHA1

51cc213e5ddebba35cdc1cdb8d91f3accc6a79fb
SHA256

195a6ef11980deeb7521585df611c45124983f2267d6f7abf329d4bf9e086951
SHA512

89787dfc26b5fb3963dba960921d3daadc812e5ecaccb28d200b2ba0963c9bf93a3e072a57c74f7cd1e2981da2bd77273427d5bc8ade56805b16d4c7b7200964
SSDEEP

6144:/lhFxDYA7tw2FOx+l2aWeCsT662T1MISUetKo5elrApI+WLAaCaomzTd/8hJF7i:BxDYA/m+l2L62T8El0Z7aooTK1W

Score

1^/10

Malware Config

Signatures

Files

195a6ef11980deeb7521585df611c45124983f2267d6f7abf329d4bf9e086951
.exe windows x86

e483627ba0f5d25827b5c3b01005efa6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
SetStdHandle
GetFileType
Sleep
ExitProcess
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
HeapAlloc
SetHandleCount
HeapCreate
VirtualFree
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetStartupInfoA
GetSystemTimeAsFileTime
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetTickCount
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GlobalFlags
SetErrorMode
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleW
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
GetVersionExA
GetCommandLineA
GetCommandLineW
CreateFileMappingA
GetLastError
lstrcmpiA
lstrlenA
GetWindowsDirectoryA
LoadLibraryA
WideCharToMultiByte
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
LoadLibraryExA
FreeLibrary
WritePrivateProfileStringA
CreateFileA
WriteFile
GetEnvironmentStringsW
CloseHandle

user32

RegisterClipboardFormatA
PostThreadMessageA
UnregisterClassA
CharUpperA
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
ReleaseCapture
SetCapture
InvalidateRect
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
CallWindowProcA
GetMenu
IntersectRect
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetFocus
SetWindowPos
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetIconInfo
ReleaseDC
CreateIconIndirect
GetDC
GetWindow
UnhookWindowsHookEx
GetSubMenu
FindWindowA
EnumChildWindows
LoadIconA
GetClientRect
IsIconic
GetSystemMenu
PostMessageA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
AppendMenuA
DrawIcon
GetClassInfoA
DefWindowProcA
EnableWindow
GetWindowTextA
GetScrollPos
FillRect
DestroyIcon
CopyIcon
LoadImageA
SystemParametersInfoA
SendMessageA
SetCursor
LoadCursorA
DestroyCursor
GetSysColor
GetSystemMetrics
GetClassNameA
GetWindowLongA
IsRectEmpty
PtInRect
SetRect
SetRectEmpty
OffsetRect
CopyRect
EqualRect
SetWindowRgn
ScreenToClient
SetTimer
KillTimer
WindowFromPoint
IsWindow
GetCursorPos
IsWindowEnabled
ChildWindowFromPoint
GetParent
ClientToScreen
GetMenuState
GetMenuItemID
GetMenuItemCount
GetWindowRect

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
DPtoLP
GetBkColor
CreateRectRgnIndirect
GetMapMode
GetTextColor
GetRgnBox
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
GetClipBox
SetMapMode
RestoreDC
SaveDC
OffsetRgn
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CombineRgn
FillRgn
SelectClipRgn
FrameRgn
TextOutA
SetTextJustification
GetTextExtentPoint32A
GetDeviceCaps
CreateFontIndirectA
GetTextMetricsA
SetBkMode
SetBkColor
SetTextColor
CreateCompatibleBitmap
CreatePen
MoveToEx
LineTo
CreateSolidBrush
CreateBitmap
StretchBlt
GetObjectA
CreateDIBSection
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyExA
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegQueryValueExA

shell32

Shell_NotifyIconA
ShellExecuteExA
CommandLineToArgvW

comctl32

ord17
ImageList_GetIcon
ImageList_GetImageCount

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e483627ba0f5d25827b5c3b01005efa6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 335KB - Virtual size: 334KB

.rdata Size: 67KB - Virtual size: 67KB

.data Size: 11KB - Virtual size: 25KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 335KB - Virtual size: 334KB

.rdata
Size: 67KB - Virtual size: 67KB

.data
Size: 11KB - Virtual size: 25KB

.rsrc
Size: 17KB - Virtual size: 16KB