3a0d64454066910e3c88696e28148e30e8d0a375f98a167753179596e1799bec

Sharing

Copy URL

Twitter E-mail

General

Target

3a0d64454066910e3c88696e28148e30e8d0a375f98a167753179596e1799bec
Size

344KB
MD5

778502fe46970dc78f9d82d3c73b2b50
SHA1

b1e820e8d828755201252e5ada49f964abb3a724
SHA256

3a0d64454066910e3c88696e28148e30e8d0a375f98a167753179596e1799bec
SHA512

cc55227402dac0adcec568b3287fe31c04fc1472809def36efda401fbf4d69af23c83ed0c736049683082af5916701b2a65215d08b96f4365c33856c3f6633dc
SSDEEP

3072:NO+0dVObK8DsxZN+yMhojFgZjPe4GfLYqexvODGEtoqBWKxINXC4cepFrOJEvkYI:LN5C+nQgbGGqEBcur6bbvjZr

Score

N/A

Malware Config

Signatures

Files

3a0d64454066910e3c88696e28148e30e8d0a375f98a167753179596e1799bec
.exe windows x86

1b1bf0dd2adfccb116eec91922ccd58e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractAssociatedIconExW

wininet

FindNextUrlCacheEntryExW

psapi

GetModuleFileNameExW

user32

SendMessageA
SetCapture
IsWindowVisible
GetForegroundWindow
GetSysColor
GetKeyboardLayoutList
GetComboBoxInfo
GetMenuStringW
LoadCursorA
GetClassLongW
GetPropW
DrawTextExA
DeleteMenu
DefFrameProcW
GetUpdateRgn
InsertMenuItemW
GetClassInfoExW
GetLastInputInfo
GetMenuItemRect

winspool.drv

FindFirstPrinterChangeNotification
DeletePrinterDriverW

advapi32

InitiateSystemShutdownA
LookupPrivilegeDisplayNameW
GetLengthSid
DeleteService

gdi32

DeleteMetaFile
GetTextCharset
EqualRgn
GetSystemPaletteEntries
GetLayout

kernel32

FindAtomA
GetVolumePathNameW
GetSystemDirectoryA
FindResourceW
ExitThread
GetExitCodeThread
DeviceIoControl
GetStartupInfoA
FormatMessageA
DeleteAtom
lstrcatA
FindActCtxSectionGuid
GetProcessId
lstrcmpW
lstrcpynW
GetConsoleDisplayMode
FindNextVolumeMountPointW
GlobalAddAtomW
DeleteVolumeMountPointW
GetCurrentProcess
GetNumberOfConsoleInputEvents
GetCurrentThread
GetThreadId
GetSystemPowerStatus
GetCommandLineA
GetPrivateProfileIntA
FlushFileBuffers
LocalSize
WriteProfileStringW
VirtualFree

oleaut32

VarDecFromR8

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

LngAgI.d
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

|VT9T
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b1bf0dd2adfccb116eec91922ccd58e

Headers

DLL Characteristics

File Characteristics

Imports

shell32

wininet

psapi

user32

winspool.drv

advapi32

gdi32

kernel32

oleaut32

Sections

.text Size: 16KB - Virtual size: 15KB

LngAgI.d Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 6KB

|VT9T Size: 132KB - Virtual size: 131KB

.rsrc Size: 180KB - Virtual size: 179KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 15KB

LngAgI.d
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 6KB

|VT9T
Size: 132KB - Virtual size: 131KB

.rsrc
Size: 180KB - Virtual size: 179KB

.reloc
Size: 4KB - Virtual size: 3KB