33053f6c1e620aff118bb75f750398d8b1c399afc081115604263bac5597b185

General

Target

33053f6c1e620aff118bb75f750398d8b1c399afc081115604263bac5597b185
Size

364KB
MD5

046255c0a70bdc4072fa3b8847dd1e50
SHA1

32c255c11242b8231528df779c4a16d2605c0ad7
SHA256

33053f6c1e620aff118bb75f750398d8b1c399afc081115604263bac5597b185
SHA512

b43c4d603a41024fb67995b3a500a20190c92acc1025c7fb73a16e386c8a87d23e1e3634c9c2e15a9f324f8583914559b08e8de4d788839149b125698bfb9560
SSDEEP

3072:MgFoRK31cs0hpuqnabsTfC8pC+ckIEN7mJKp8hmHViBeE4Nlm3E4bdGPqdojAZSJ:ME5WXf5LcwPp0m1i94XzPqGjfRpo

Score

N/A

Malware Config

Signatures

Files

33053f6c1e620aff118bb75f750398d8b1c399afc081115604263bac5597b185
.exe windows x86

6178c902b1a2373b6ca1ef0b060a77bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
LoadStringA
wsprintfA

winspool.drv

DeleteMonitorA
EnumPortsA
EnumMonitorsA

advapi32

RegOpenKeyExA
RegDeleteKeyA
RegCloseKey

kernel32

TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
DeleteFileA
SetLastError
WritePrivateProfileStringA
GetWindowsDirectoryA
MoveFileExA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetVersion
HeapFree
GetCommandLineA
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStartupInfoA
GetCurrentProcess
LCMapStringW
WriteFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetACP
RtlUnwind
GetOEMCP
GetLastError
SetFilePointer
GetCPInfo
MultiByteToWideChar
GetProcAddress
LoadLibraryA
SetStdHandle
LCMapStringA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�s
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6178c902b1a2373b6ca1ef0b060a77bb

Headers

File Characteristics

Imports

user32

winspool.drv

advapi32

kernel32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 148KB - Virtual size: 146KB

�s Size: 92KB - Virtual size: 92KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 148KB - Virtual size: 146KB

�s
Size: 92KB - Virtual size: 92KB