5248b5cb30c3bbb230ac43ece150ad96240cc90bafe9605f46349d3943dde34f

Sharing

Copy URL Twitter E-mail

General

Target

5248b5cb30c3bbb230ac43ece150ad96240cc90bafe9605f46349d3943dde34f
Size

330KB
MD5

68b60f342f4bf4bedcb49d6d1e624870
SHA1

be4ea20925ee837f5a8aaabba897d37e179555c5
SHA256

5248b5cb30c3bbb230ac43ece150ad96240cc90bafe9605f46349d3943dde34f
SHA512

6200b1dd983c25e5a919018f9ae1598204bf8e95303cd25652582c0f712e68edbdba4ada45a8d4f67b14b4f257bee7bcff6bf6d27e34754bc84a0c3ce34ab695
SSDEEP

6144:uk1mQZSUNhGc4HwLbqXk1/KPgD8l5N2UNvSNTf4VdcfsmXiw4dwSr+p:uStDNhGc4HabqXk19D0nPvdEbRSrm

Score

N/A

Malware Config

Signatures

Files

5248b5cb30c3bbb230ac43ece150ad96240cc90bafe9605f46349d3943dde34f
.exe windows x86

b2bd470abcdd47ba9ba5ae0afed4a076

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetBrushOrgEx
CreateDiscardableBitmap
CreateDCW
Ellipse
DeleteDC
GdiSetBatchLimit
EndPage
GetAspectRatioFilterEx
GdiComment
CancelDC
AbortDoc
CreateFontW
DescribePixelFormat
CloseMetaFile
AngleArc

comctl32

CreatePropertySheetPageA
UninitializeFlatSB
ord6
ord4
ord5
ord2
DestroyPropertySheetPage

shlwapi

StrCSpnA
StrToIntA
StrChrA

kernel32

OpenMutexA
LeaveCriticalSection
LocalFlags
GetModuleHandleA
GetProcAddress
GetModuleHandleW
Sleep
VirtualAllocEx
HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
IsProcessorFeaturePresent
RtlUnwind
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GlobalMemoryStatus
CreateSemaphoreA
GetProcessHeap
SetThreadLocale
GlobalSize
HeapCreate
IsBadStringPtrA
GetUserDefaultLCID
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
GetLastError
GetFileAttributesA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
HeapReAlloc

winspool.drv

DeletePrinter
AddPrintProcessorA
GetJobA
DeletePrinterDriverW
AddPrinterA
AddPrinterW
DeletePrinterDriverA
EnumPrintProcessorsW
GetPrinterW
AddFormA
GetPrinterDriverW
DeletePrinterConnectionA
AbortPrinter

secur32

FreeCredentialsHandle
CompleteAuthToken
VerifySignature
ApplyControlToken
DeleteSecurityContext
ExportSecurityContext
MakeSignature

msvfw32

DrawDibStart
ICSendMessage
ord2
ICOpenFunction
GetSaveFileNamePreviewW

avifil32

AVIStreamBeginStreaming
AVIStreamInfoA
AVIFileEndRecord
AVIStreamLength
AVIStreamAddRef
AVIStreamEndStreaming
EditStreamSetNameA
AVIStreamReadData

avicap32

capGetDriverDescriptionA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2bd470abcdd47ba9ba5ae0afed4a076

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

comctl32

shlwapi

kernel32

winspool.drv

secur32

msvfw32

avifil32

avicap32

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 13KB - Virtual size: 23KB

.rsrc Size: 284KB - Virtual size: 284KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 13KB - Virtual size: 23KB

.rsrc
Size: 284KB - Virtual size: 284KB