caae05d1d240b8265015260829fbafbfb0891c13ef2152c149052747b70d6184

General

Target

caae05d1d240b8265015260829fbafbfb0891c13ef2152c149052747b70d6184
Size

543KB
MD5

6fb19dd30524827db003f263c653e470
SHA1

d3e1d710846ae9f9bf217204e390fdd3f1fa1276
SHA256

caae05d1d240b8265015260829fbafbfb0891c13ef2152c149052747b70d6184
SHA512

8c7927a6c19094959eb6ba3e85e9809f5be40aa1c7e2e52f397c4fa4e2e534e1106e0c0d8f160686dc2e84c96339b1d3124ae0f08e05b7542efc5066237c5c4a
SSDEEP

12288:eiF6rygByFwe+xYDl8upE8+Z1v+NaLy7gCv/YApC:1F6NOwe+x+/81v+NgAgWLw

Score

N/A

Malware Config

Signatures

Files

caae05d1d240b8265015260829fbafbfb0891c13ef2152c149052747b70d6184
.exe windows x86

106b4e954251b3c30574599b185838cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

tapi32

lineGetDevCapsW
lineMakeCallA
lineGetDevCapsA
lineNegotiateAPIVersion
lineTranslateAddressW
phoneGetButtonInfoW

mscms

OpenColorProfileW
IsColorProfileValid
DeleteColorTransform
InternalGetPS2ColorSpaceArray
UninstallColorProfileW
GetColorProfileElement

advapi32

UnregisterTraceGuids
LookupAccountSidW
GetNamedSecurityInfoA
RevertToSelf
QueryRecoveryAgentsOnEncryptedFile

kernel32

DisableThreadLibraryCalls
BindIoCompletionCallback
CallNamedPipeA
Process32Next
TerminateJobObject
_hwrite
GetCurrentThreadId
SetConsoleTitleA
WriteConsoleW
PrepareTape
RemoveDirectoryA
VirtualAlloc

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CRT
Size: 119KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 370KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

106b4e954251b3c30574599b185838cc

Headers

DLL Characteristics

File Characteristics

Imports

tapi32

mscms

advapi32

kernel32

Sections

.text Size: 14KB - Virtual size: 13KB

CRT Size: 119KB - Virtual size: 224KB

.rdata Size: 370KB - Virtual size: 488KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 512B - Virtual size: 112B

.text
Size: 14KB - Virtual size: 13KB

CRT
Size: 119KB - Virtual size: 224KB

.rdata
Size: 370KB - Virtual size: 488KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 512B - Virtual size: 112B