97666acde48b07d9229b0d946061ff7f263e2e0459285a1219eba450f10ab42e

Sharing

Copy URL Twitter E-mail

General

Target

97666acde48b07d9229b0d946061ff7f263e2e0459285a1219eba450f10ab42e
Size

3.9MB
MD5

7b69b243365a404d6045f583bb9ef283
SHA1

2c0c1da1aa57938f39a02eb9a7090e1f5acdd13a
SHA256

97666acde48b07d9229b0d946061ff7f263e2e0459285a1219eba450f10ab42e
SHA512

033eba06b79cbb8d8307bdd8a7e25a18336a6dae5f2104775b60db8c9f6ec48d7ca5217beaac52a6b1d1587a6c2a99e248cecf47102332ef905ae06d1b8abcc9
SSDEEP

98304:Hyxw3mgeurDgnNPTBF3Ur4B5ttr5Fa35eqsAHY8m1Rv9Hlu2qb:Hmop0Ur4BrNu35esHY71Vxg2

Score

N/A

Malware Config

Signatures

Files

97666acde48b07d9229b0d946061ff7f263e2e0459285a1219eba450f10ab42e
.exe windows x86

3a0e21e120970fe549bbdf202152fbc1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetVersion
GetVersionExA
GetVersion
GetStartupInfoA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetKeyboardType

advapi32

CreateServiceA

oleaut32

SafeArrayPtrOfIndex

mpr

WNetGetUniversalNameA

version

GetFileVersionInfoSizeA

gdi32

SetTextAlign

ole32

RevokeDragDrop

comctl32

ImageList_DragEnter

winspool.drv

ClosePrinter

shell32

ShellExecuteA

comdlg32

PrintDlgA

rfdll32

rf_rd_card

Sections

CODE
Size: - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 56KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a0e21e120970fe549bbdf202152fbc1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

mpr

version

gdi32

ole32

comctl32

winspool.drv

shell32

comdlg32

rfdll32

Sections

CODE Size: - Virtual size: 2.8MB

DATA Size: - Virtual size: 42KB

BSS Size: - Virtual size: 56KB

.idata Size: - Virtual size: 13KB

.tls Size: - Virtual size: 24B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 2.7MB

.vmp1 Size: 3.9MB - Virtual size: 3.9MB

.reloc Size: 512B - Virtual size: 324B

.rsrc Size: 6KB - Virtual size: 5KB

CODE
Size: - Virtual size: 2.8MB

DATA
Size: - Virtual size: 42KB

BSS
Size: - Virtual size: 56KB

.idata
Size: - Virtual size: 13KB

.tls
Size: - Virtual size: 24B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 2.7MB

.vmp1
Size: 3.9MB - Virtual size: 3.9MB

.reloc
Size: 512B - Virtual size: 324B

.rsrc
Size: 6KB - Virtual size: 5KB