3eda0c4149ca686c3792d85e43107e5039bdfde837cc772104d79f6c1f0b2900

Sharing

Copy URL

Twitter E-mail

General

Target

3eda0c4149ca686c3792d85e43107e5039bdfde837cc772104d79f6c1f0b2900
Size

345KB
MD5

77b129d8d1bacb46cbc0c64db833602d
SHA1

9b25e643403467e0c4db59ecf0ce47b126fbbffb
SHA256

3eda0c4149ca686c3792d85e43107e5039bdfde837cc772104d79f6c1f0b2900
SHA512

ada569a2e31b3f613b751ae3543bb92447c6d74fc306b0a11043d08e7d7aee837d2994158d9bce439beb68b4f0b28b20c9b05c45ae8f42722290304facfd8e8b
SSDEEP

6144:l5hdPa3Ez3Imv7xxT3wvMiE+ZxtyRAdE/T67VT:ddPa3iYiFxrwUiz7Td

Score

N/A

Malware Config

Signatures

Files

3eda0c4149ca686c3792d85e43107e5039bdfde837cc772104d79f6c1f0b2900
.exe windows x86

d0b11993b8ea39fc9ad048bf3b7a8ca9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
WriteConsoleW
HeapSize
FlushFileBuffers
HeapReAlloc
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
LCMapStringW
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
Sleep
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
GetStdHandle
WriteFile
IsProcessorFeaturePresent
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
CreateThread
CloseHandle
GetVersionExA
OutputDebugStringA
WaitForMultipleObjects
LoadLibraryA
GlobalFree
GetProcAddress
ReleaseSemaphore
CreateSemaphoreA
GetFileType
HeapCreate
InterlockedIncrement
GetCPInfo
GlobalAlloc
GetTickCount
SetHandleCount
WaitForSingleObject
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleW
IsDebuggerPresent
HeapAlloc
FreeLibrary
GetFullPathNameA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
GetLastError

user32

SetScrollInfo
GetScrollPos
GetShellWindow
LoadCursorA
FindWindowA
UnregisterHotKey
UpdateWindow
DialogBoxParamA
SetCaretPos
ReleaseCapture
GetSystemMenu
PostQuitMessage
LoadStringA
GetParent
LoadIconA
ShowCaret
GetDC
GetForegroundWindow
GetWindowLongA
SetClassLongA
EndDialog
LoadAcceleratorsA
IsDlgButtonChecked
AppendMenuA
CreateCaret
IsWindow

gdi32

GetDeviceCaps
GetCurrentObject
GetCurrentPositionEx
GetTextMetricsA

winspool.drv

ClosePrinter

gdiplus

GdipDrawLineI
GdipCloneImage
GdipFree
GdipDeletePen
GdipDeleteGraphics
GdipDrawImageRectI
GdipLoadImageFromFile
GdipAlloc
GdipDisposeImage
GdipCreateFromHDC
GdipCreatePen1

opengl32

glNormal3f
glBegin
glVertex3f
glClear
glEnd

Sections

.text
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0b11993b8ea39fc9ad048bf3b7a8ca9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

gdiplus

opengl32

Sections

.text Size: 308KB - Virtual size: 308KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 6KB - Virtual size: 18KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 308KB - Virtual size: 308KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 6KB - Virtual size: 18KB

.rsrc
Size: 12KB - Virtual size: 12KB