39c49f6d1d7636698f7b1da3f7528798ed4c72d4ba2fb836abfe36cb26b77a0d

Sharing

Copy URL

Twitter E-mail

General

Target

39c49f6d1d7636698f7b1da3f7528798ed4c72d4ba2fb836abfe36cb26b77a0d
Size

124KB
MD5

d2e6d34475fcba320609b1eb58884525
SHA1

f5b6fe51750881f14dfe112c3fe6c90afedb7191
SHA256

39c49f6d1d7636698f7b1da3f7528798ed4c72d4ba2fb836abfe36cb26b77a0d
SHA512

3c5c61b971b98e7660467d53bb20e063789aadabeb005336b8144b4d87d9a4de08f39ea90ed598246f48494193ea9eb194b17c173e696621592d07244cd66568
SSDEEP

3072:jR60A0j92Bs5JDo57bauV75dqhY4GxdZ4:jR60nzo5faCqEp

Score

N/A

Malware Config

Signatures

Files

39c49f6d1d7636698f7b1da3f7528798ed4c72d4ba2fb836abfe36cb26b77a0d
.exe windows x86

c61adb06af3992c5e7e63a2fc85c9851

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathQuoteSpacesA
wnsprintfA
StrChrIA

ole32

CoTaskMemRealloc

msvfw32

DrawDibEnd

oleaut32

VariantCopyInd
VarBstrFromUI4

gdi32

CreateFontW
GetTextExtentPointA
GetKerningPairsW
LPtoDP

comctl32

ImageList_SetBkColor

winspool.drv

EnumPrinterKeyW

crypt32

CryptEnumOIDFunction

winmm

midiOutOpen

netapi32

NetShareEnum

wintrust

CryptCATCDFEnumMembers

setupapi

SetupDiSetDriverInstallParamsW
SetupPromptForDiskA

advapi32

RegDeleteValueW
AddAccessDeniedObjectAce
RegEnumKeyExW

ntdsapi

DsBindWithCredW

winscard

SCardIntroduceCardTypeW

user32

VkKeyScanExW
GetSystemMetrics
wsprintfW
CreateDialogIndirectParamA
FindWindowA
DrawCaption

kernel32

FindFirstVolumeW
GetCurrentProcessId
GetModuleHandleA
ExitProcess
GetModuleFileNameW
InitAtomTable
SetConsoleMode
GetBinaryTypeW
LocalFlags
PurgeComm
VirtualAlloc
FindFirstFileExW

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 352B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c61adb06af3992c5e7e63a2fc85c9851

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

ole32

msvfw32

oleaut32

gdi32

comctl32

winspool.drv

crypt32

winmm

netapi32

wintrust

setupapi

advapi32

ntdsapi

winscard

user32

kernel32

Sections

.text Size: 4KB - Virtual size: 2KB

.code Size: 12KB - Virtual size: 9KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 4KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 352B

.text
Size: 4KB - Virtual size: 2KB

.code
Size: 12KB - Virtual size: 9KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 4KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 352B