c4f29fb97348c8d3408d01a3e2362d6840135885fa126c545949dcc9f38ef13f

General

Target

c4f29fb97348c8d3408d01a3e2362d6840135885fa126c545949dcc9f38ef13f
Size

155KB
MD5

1dd6c0990e4c3b2d3e22e1641379a325
SHA1

f92b9d921819f3314a006306402567c186b3a897
SHA256

c4f29fb97348c8d3408d01a3e2362d6840135885fa126c545949dcc9f38ef13f
SHA512

a4a76065f5391886216cacc2bc481b4a5cba33530ad00fc0af311831b90c4177397414c6655c833c9bfb62fdde13ec961e397721b2629b6f45c21598f0907ac5
SSDEEP

3072:bRNgmHEc1Lu4BwqfjSNX0FAQ3iLERUzosVGZz1D10mAmRiq5FRB:Tg6f1Cq0NXS0Ea0/DSmSq9

Score

N/A

Malware Config

Signatures

Files

c4f29fb97348c8d3408d01a3e2362d6840135885fa126c545949dcc9f38ef13f
.exe windows x86

ed801e81efdce87adfd7dfbe90963ad9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
VirtualProtect

wsock32

send
ord1103
listen
ord1111
select
ord1106
getservbyname

winspool.drv

EnumPrinterDataW
ExtDeviceMode
AddPrinterDriverA
SetPrinterDataA
ord207
AddPrintProcessorW
AddPortW
EXTDEVICEMODE

winmm

auxSetVolume
mmioClose
waveInGetErrorTextW
midiStreamOpen
SendDriverMessage
mciSetDriverData
midiInPrepareHeader
waveOutSetVolume
waveOutOpen
waveInMessage
mmTaskSignal
mixerGetDevCapsW

oleaut32

VarDateFromDisp
VarI4FromR4
VarDecFix
VarNot

rtutils

TraceVprintfExA
TracePrintfW

user32

IsMenu
TrackPopupMenuEx
ShowWindow
GetClassInfoA
SendInput

pdh

PdhSelectDataSourceW
PdhVbIsGoodStatus
PdhSetCounterScaleFactor
PdhGetRawCounterValue
PdhOpenQuery

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 19B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed801e81efdce87adfd7dfbe90963ad9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wsock32

winspool.drv

winmm

oleaut32

rtutils

user32

pdh

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 19B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 108B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 19B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 108B