a01e2a1fc23b0f248a4b4106b25417fc5da552867f65b82b52472dabfe3560bf

Sharing

Copy URL

Twitter E-mail

General

Target

a01e2a1fc23b0f248a4b4106b25417fc5da552867f65b82b52472dabfe3560bf
Size

156KB
MD5

8067a6a656c85b2558637718763088b9
SHA1

cad00d9e3867f25ded392d0d155d18be57127c18
SHA256

a01e2a1fc23b0f248a4b4106b25417fc5da552867f65b82b52472dabfe3560bf
SHA512

8c055eb9fe259b3510a10772d82c8d79cad348cfce52b7ee1ef436a4107fb135dfc95903fe8f0c9e04b45327e0e83f01bbe8bdfc559469087ca05290f6b5a368
SSDEEP

3072:vusUWBdG1Wxf3ck9zBblm0656YluRsoi+VR7d3w:dku/c8blmBgYlu0gr3w

Score

N/A

Malware Config

Signatures

Files

a01e2a1fc23b0f248a4b4106b25417fc5da552867f65b82b52472dabfe3560bf
.dll windows x86

9b9f55f5efeeccbb070c8345232e3d52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
CompareStringW
SetEnvironmentVariableA
GetVersionExA
RaiseException
LCMapStringW
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleA
GetLastError
CloseHandle
WriteFile
InitializeCriticalSection
SetFilePointer
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA

user32

GetDC
ReleaseDC
MessageBoxA

gdi32

BitBlt
CreateDIBSection
GetObjectA
DeleteObject
DeleteDC
SelectObject
CreateCompatibleDC

ptimagerw

ord7
ord1
ord2
ord6

Exports

Exports

PtQRDecode
PtQRDecodeFree
PtQRDecodeFromBitmap
PtQRDecodeFromFile
PtQRDecodeInit
PtQRDecodeRegister

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b9f55f5efeeccbb070c8345232e3d52

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ptimagerw

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 47KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 47KB

.reloc
Size: 8KB - Virtual size: 5KB