97872ebe61471c5cab904c41110de8a802f3681eb2512654e2f59cea8b1df7f0

Sharing

Copy URL Twitter E-mail

General

Target

97872ebe61471c5cab904c41110de8a802f3681eb2512654e2f59cea8b1df7f0
Size

177KB
MD5

5f028a09bd0dd650a3732131fdc1dc10
SHA1

e22ddbcb0c22f7fe5f995374313ab3543f3794ae
SHA256

97872ebe61471c5cab904c41110de8a802f3681eb2512654e2f59cea8b1df7f0
SHA512

d88e782d8614934cf51123b375a3aaf55fc4c4e84fe95aa033b31938a40dfe912c2b8e400799c2baee06f08b2f5ea76809da07fae1634dce5f3e57785cdde99f
SSDEEP

3072:st21N2N6buomS/bDoRIMmllcixB2X+ANGyyvpcXytVlSf8+CxZUO8C:sc1U4HjDoRIl7ci2+ANGFvZVlSfPCxv

Score

N/A

Malware Config

Signatures

Files

97872ebe61471c5cab904c41110de8a802f3681eb2512654e2f59cea8b1df7f0
.exe windows x86

6ae37c11ce5024729bf4066bb47cd048

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFileExistsW
PathAppendW
PathFindFileNameW
PathFindExtensionW

gdi32

SetViewportExtEx
DeleteObject
SetViewportOrgEx
ScaleWindowExtEx
GetDeviceCaps
SelectObject
ExtTextOutW
PtVisible
CreateBitmap
ScaleViewportExtEx
SetMapMode
SetBkColor
RestoreDC
TextOutW
Escape
RectVisible
SetTextColor
GetClipBox
SaveDC
DeleteDC
SetWindowExtEx
OffsetViewportOrgEx
GetStockObject

shell32

SHGetSpecialFolderPathW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

kernel32

GetStringTypeA
HeapSize
GetStdHandle
IsBadCodePtr
GetShortPathNameA
GetStringTypeW
SetUnhandledExceptionFilter
VirtualQuery
GetSystemTimeAsFileTime
IsBadWritePtr
HeapFree
GetEnvironmentStringsW
HeapDestroy
GetProcessAffinityMask
GetFileType
SetStdHandle
GetStartupInfoA
UnhandledExceptionFilter
IsBadReadPtr
GetOEMCP
GetCurrentProcessId
EnumResourceTypesW
HeapReAlloc
RtlUnwind
GetCPInfo
GetSystemInfo
WriteFile
QueryPerformanceCounter
GetCurrentProcess
VirtualFree
GetCommandLineA
VirtualAlloc
GetTickCount
GetFileAttributesA
VirtualProtect
FreeEnvironmentStringsW
SetHandleCount
GetModuleFileNameA
HeapAlloc
HeapCreate
GetEnvironmentStrings
LCMapStringW
LCMapStringA
SetFilePointer
TerminateProcess
FlushFileBuffers
ExitProcess

ole32

CoUninitialize
CoCreateInstance
CoInitialize

user32

EnableMenuItem
MessageBoxW
ReleaseDC
GetSystemMetrics
GetDC
LoadBitmapW
GetLastActivePopup
ModifyMenuW
GetWindowTextW
GetSysColor
GetParent
GetWindowLongW
LoadCursorW
GetMenuCheckMarkDimensions
IsWindowEnabled
EnableWindow
CheckMenuItem
GetSysColorBrush

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ae37c11ce5024729bf4066bb47cd048

Headers

File Characteristics

Imports

advapi32

shlwapi

gdi32

shell32

winspool.drv

kernel32

ole32

user32

Sections

.text Size: 102KB - Virtual size: 102KB

.rdata Size: 3KB - Virtual size: 2KB

.bss Size: 69KB - Virtual size: 69KB

.tls Size: 1024B - Virtual size: 248KB

.text
Size: 102KB - Virtual size: 102KB

.rdata
Size: 3KB - Virtual size: 2KB

.bss
Size: 69KB - Virtual size: 69KB

.tls
Size: 1024B - Virtual size: 248KB