d3a6bb40e59e3ad642a702c59458a2ee7d04bc727c0bd55ecbd817bdc8cc38ee

Sharing

Copy URL Twitter E-mail

General

Target

d3a6bb40e59e3ad642a702c59458a2ee7d04bc727c0bd55ecbd817bdc8cc38ee
Size

276KB
MD5

aff371de4e32699e8cf007e2b8caac4d
SHA1

c175ad0a543f916621063cb54d7541e3bb37e76a
SHA256

d3a6bb40e59e3ad642a702c59458a2ee7d04bc727c0bd55ecbd817bdc8cc38ee
SHA512

a373c8e334bcb3747c0b67ce67416f42296452de32fe82b79c5c5075a0896e31602536e6b85ec1f9d7488841476563f48e3cab2e3e692493c31c952a75b79036
SSDEEP

6144:5KYnRnds1RGDJL1KNEsL6Zoi1q85aux7dQdXrsd62NHPAlCBVwkTf4Zi0+Z/u3I/:wYnRndsGDh1KNEsL6d1qkaux7dQdXrst

Score

N/A

Malware Config

Signatures

Files

d3a6bb40e59e3ad642a702c59458a2ee7d04bc727c0bd55ecbd817bdc8cc38ee
.exe windows x86

9af77503a4ba7cfb8552c5657c56e0e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DeferWindowPos
AdjustWindowRect
SetWindowTextW
DestroyAcceleratorTable

comdlg32

GetSaveFileNameW
ChooseFontA
GetFileTitleA
FindTextA
GetFileTitleW
FindTextW
PrintDlgW
PageSetupDlgW
PrintDlgA
ReplaceTextA
GetOpenFileNameW
ChooseFontW
GetOpenFileNameA
ChooseColorW

shell32

SHFileOperation
SHGetDataFromIDListA
ExtractIconEx
SHGetSpecialFolderLocation
SHAddToRecentDocs
CheckEscapesW

advapi32

LookupPrivilegeValueW
CryptGetDefaultProviderW
RegRestoreKeyA
RegCloseKey
CryptVerifySignatureW
AbortSystemShutdownA
CryptGetKeyParam

kernel32

SetLastError
FreeEnvironmentStringsW
HeapFree
UnhandledExceptionFilter
LeaveCriticalSection
IsBadWritePtr
OpenProcess
InterlockedExchange
GetCurrentProcessId
HeapReAlloc
GetSystemDefaultLCID
GetCurrentThreadId
GetSystemTimeAsFileTime
DeleteFiber
VirtualQuery
HeapCreate
VirtualAlloc
GetStartupInfoW
EnterCriticalSection
GetTickCount
FreeEnvironmentStringsA
ExitProcess
GetCurrentProcess
TlsGetValue
ReadConsoleA
HeapAlloc
GetCurrentThread
GetModuleFileNameW
EnumCalendarInfoW
InitializeCriticalSection
SetHandleCount
GetEnvironmentStringsW
VirtualFree
WriteFile
GetModuleFileNameA
GetProfileStringA
TlsFree
HeapDestroy
RtlUnwind
GetFileType
GetCommandLineW
GetEnvironmentStrings
LoadLibraryA
GetStartupInfoA
TlsSetValue
QueryPerformanceCounter
GetModuleHandleA
GetStdHandle
GetCommandLineA
TlsAlloc
GetProcAddress
GetLogicalDriveStringsA
DeleteCriticalSection
MultiByteToWideChar
GetVersion
TerminateProcess
GetLastError

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9af77503a4ba7cfb8552c5657c56e0e5

Headers

File Characteristics

Imports

user32

comdlg32

shell32

advapi32

kernel32

Sections

.text Size: 133KB - Virtual size: 133KB

.data Size: 131KB - Virtual size: 131KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 133KB - Virtual size: 133KB

.data
Size: 131KB - Virtual size: 131KB

.rsrc
Size: 10KB - Virtual size: 10KB