5c15d617a30e17095e02b1be9f509dd7fc9088acfed91d665cb63b8679ad1995

Sharing

Copy URL

Twitter E-mail

General

Target

5c15d617a30e17095e02b1be9f509dd7fc9088acfed91d665cb63b8679ad1995
Size

319KB
MD5

57a7ed4d45dd5666df736cd84f4c35f0
SHA1

393470cedbd3fbb2ae769ca64592452d7ba8b650
SHA256

5c15d617a30e17095e02b1be9f509dd7fc9088acfed91d665cb63b8679ad1995
SHA512

b9f91acd030a458f288da4b2d7d52f31310c15615836bd2d6fb5dcc875ad50bcd84dec3e2f19da58bd0c17784e9aa6551dd166755b29cf7ea209da2ad8041b72
SSDEEP

3072:ovKo+FFpwcKBO8VFmmNxdbSKyDlDibKOhDgLU8Hl9ynjlTnXs2zxiypTWyH2ml62:oCbffubSK3brsLU8CnjlzzzAqLHl62

Score

N/A

Malware Config

Signatures

Files

5c15d617a30e17095e02b1be9f509dd7fc9088acfed91d665cb63b8679ad1995
.exe windows x86

cf3ba4e719cba8faf9940695a68041ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringW
SetThreadPriority
CreateTimerQueue
GetCommState
GetSystemWindowsDirectoryA
GetDateFormatA
GetNumberFormatA
GetProcessHeaps
WriteFile
VerifyVersionInfoW
GetCurrencyFormatW
OutputDebugStringA
LocalShrink
EndUpdateResourceW
SetProcessShutdownParameters
CreateSemaphoreA
IsProcessorFeaturePresent
WritePrivateProfileStructA
SetWaitableTimer
QueryPerformanceFrequency
QueueUserAPC
GetAtomNameA
GetTempFileNameA
CloseHandle
PostQueuedCompletionStatus
CallNamedPipeA
CompareStringA
ContinueDebugEvent
CreateSemaphoreW
LocalAlloc
GetWindowsDirectoryW
Sleep
GetVolumePathNameW
UnhandledExceptionFilter
FileTimeToLocalFileTime
SetThreadIdealProcessor
CreateJobObjectA
GetVersion
SetFilePointer

winspool.drv

ResetPrinterW

shell32

SHGetNewLinkInfoA
ExtractAssociatedIconExW
ExtractAssociatedIconA
SHGetIconOverlayIndexA
SHBrowseForFolderA
SHGetMalloc

user32

OpenClipboard
RemoveMenu
UnregisterDeviceNotification
DefDlgProcW
RegisterShellHookWindow
DdeCreateDataHandle
MonitorFromRect
SendMessageCallbackW
IMPQueryIMEA
CopyImage
LockWindowUpdate
MonitorFromPoint
ExcludeUpdateRgn
DdeCreateStringHandleW
CascadeWindows
GetKeyboardLayoutList
IsClipboardFormatAvailable
GetMenuBarInfo
SendMessageCallbackA
TrackPopupMenuEx
SendDlgItemMessageW
DdeSetQualityOfService
CallMsgFilterA
ShowWindow
CheckDlgButton
UnregisterClassW
DestroyWindow
IsDlgButtonChecked
IntersectRect
FindWindowW
SetWindowWord
EnableScrollBar
AllowSetForegroundWindow
GetClassNameW
SwitchDesktop
GetUserObjectInformationW
DdeFreeDataHandle
EnumChildWindows
IsIconic
EmptyClipboard
OemToCharW
GetCaretPos
GetDesktopWindow
SetClassWord
SetScrollRange
DefWindowProcA
GetScrollPos
CreateDesktopA
DestroyAcceleratorTable
SetWinEventHook
LoadAcceleratorsA
LoadCursorFromFileA
DispatchMessageA
GetKeyState
AnimateWindow
IMPQueryIMEW
PeekMessageW
GetWindow
IsZoomed
GetMenuContextHelpId
GetPropW
LoadIconA
PostMessageW
GetAncestor
DrawFrameControl
GetMenuStringA
GetPropA
EnumDesktopsW
DrawStateW
MessageBoxExA
InvalidateRect
GetMenu
SetUserObjectSecurity
DdeQueryNextServer

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf3ba4e719cba8faf9940695a68041ff

Headers

File Characteristics

Imports

kernel32

winspool.drv

shell32

user32

Sections

.text Size: 140KB - Virtual size: 139KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 72KB - Virtual size: 139KB

.text Size: 512B - Virtual size: 464B

.rsrc Size: 101KB - Virtual size: 101KB

.text
Size: 140KB - Virtual size: 139KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 72KB - Virtual size: 139KB

.text
Size: 512B - Virtual size: 464B

.rsrc
Size: 101KB - Virtual size: 101KB