f5043243a4ea93a059747782e92285cfb28cf0186bc88ddb2349fdd91bc6dffb

Sharing

Copy URL Twitter E-mail

General

Target

f5043243a4ea93a059747782e92285cfb28cf0186bc88ddb2349fdd91bc6dffb
Size

330KB
MD5

774bf4320267c5bb43db45e2ff591700
SHA1

82c7b3e6ab000c4e9ea5facc9f69d91aac8607d6
SHA256

f5043243a4ea93a059747782e92285cfb28cf0186bc88ddb2349fdd91bc6dffb
SHA512

2ad7c1dd8e0e364bbd825eb7c5af663b31738aecc8b3fc0124a475c635c378c6c38e030c7cae6e7693016504ecd67315cf50d5363cea7d99ede7de444fbb0605
SSDEEP

6144:wk1S52Q/LH4Qot8p6leGocpTZK92lMRFwS4Y/1luN/tFMwtHSf7:wSq3TYQoidGocto92uiY/1lyK7

Score

N/A

Malware Config

Signatures

Files

f5043243a4ea93a059747782e92285cfb28cf0186bc88ddb2349fdd91bc6dffb
.exe windows x86

b2bd470abcdd47ba9ba5ae0afed4a076

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetBrushOrgEx
CreateDiscardableBitmap
CreateDCW
Ellipse
DeleteDC
GdiSetBatchLimit
EndPage
GetAspectRatioFilterEx
GdiComment
CancelDC
AbortDoc
CreateFontW
DescribePixelFormat
CloseMetaFile
AngleArc

comctl32

CreatePropertySheetPageA
UninitializeFlatSB
ord6
ord4
ord5
ord2
DestroyPropertySheetPage

shlwapi

StrCSpnA
StrToIntA
StrChrA

kernel32

OpenMutexA
LeaveCriticalSection
LocalFlags
GetModuleHandleA
GetProcAddress
GetModuleHandleW
Sleep
VirtualAllocEx
HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
IsProcessorFeaturePresent
RtlUnwind
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GlobalMemoryStatus
CreateSemaphoreA
GetProcessHeap
SetThreadLocale
GlobalSize
HeapCreate
IsBadStringPtrA
GetUserDefaultLCID
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
GetLastError
GetFileAttributesA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
HeapReAlloc

winspool.drv

DeletePrinter
AddPrintProcessorA
GetJobA
DeletePrinterDriverW
AddPrinterA
AddPrinterW
DeletePrinterDriverA
EnumPrintProcessorsW
GetPrinterW
AddFormA
GetPrinterDriverW
DeletePrinterConnectionA
AbortPrinter

secur32

FreeCredentialsHandle
CompleteAuthToken
VerifySignature
ApplyControlToken
DeleteSecurityContext
ExportSecurityContext
MakeSignature

msvfw32

DrawDibStart
ICSendMessage
ord2
ICOpenFunction
GetSaveFileNamePreviewW

avifil32

AVIStreamBeginStreaming
AVIStreamInfoA
AVIFileEndRecord
AVIStreamLength
AVIStreamAddRef
AVIStreamEndStreaming
EditStreamSetNameA
AVIStreamReadData

avicap32

capGetDriverDescriptionA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2bd470abcdd47ba9ba5ae0afed4a076

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

comctl32

shlwapi

kernel32

winspool.drv

secur32

msvfw32

avifil32

avicap32

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 13KB - Virtual size: 23KB

.rsrc Size: 284KB - Virtual size: 284KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 13KB - Virtual size: 23KB

.rsrc
Size: 284KB - Virtual size: 284KB