4604c43f23971a8a144cf50cd51c7b329fdb1b7046445a1cf9175def52ec20f3

Sharing

Copy URL Twitter E-mail

General

Target

4604c43f23971a8a144cf50cd51c7b329fdb1b7046445a1cf9175def52ec20f3
Size

167KB
MD5

070b24013cc05c805672767c15a684ae
SHA1

2681e83f1f0eef09f4bbbb4061931ee1219975aa
SHA256

4604c43f23971a8a144cf50cd51c7b329fdb1b7046445a1cf9175def52ec20f3
SHA512

e159c81a9738d40840cbf54b1f53ad08c22e49277aeed8addbbb367ed76064e745c67f2d24a0de587739caf1b02e541521d65ff3da762a10289511aac6fc905d
SSDEEP

1536:8J6Gnt/b147szjR1fWf2oG4M+vQbkn7hd5bH8OH6KCcamlPBYeLPf/PhgYZXzmo7:cnNwsxcFMq7hd5bRTjhX9vZXcLCzs

Score

N/A

Malware Config

Signatures

Files

4604c43f23971a8a144cf50cd51c7b329fdb1b7046445a1cf9175def52ec20f3
.exe windows x86

dc3c84b4303f2fd23e04269131018056

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetDesktopWindow
CharNextA
GetParent
TranslateMessage
GetSystemMetrics

kernel32

GetCurrentThreadId
lstrcmpA
CopyFileA
GetACP
GetCurrentProcessId
GetProcessHeap
GetUserDefaultLangID
GetTickCount
RemoveDirectoryA
GetStartupInfoA
GetModuleHandleW
GetThreadLocale
GetCurrentProcess
IsDebuggerPresent
GlobalFindAtomW
GlobalFindAtomA
GetModuleHandleA
MulDiv
SetCurrentDirectoryA
GetOEMCP
lstrlenW
GetDriveTypeA
VirtualAlloc
DeleteFileA
VirtualFree
lstrlenA
DeleteFileW
GetConsoleOutputCP
lstrcmpiA
GetCurrentThread
lstrcmpiW
QueryPerformanceCounter
GetWindowsDirectoryA
GetCommandLineA
GetCommandLineW
GetVersion

gdi32

GetTextMetricsA
SelectObject
SetMapMode
SaveDC
RestoreDC
GetStockObject
CreatePalette
CreateFontIndirectA
CreateSolidBrush
RectVisible
SetTextAlign
LineTo
GetPixel
DeleteDC
PatBlt
GetObjectA
SetStretchBltMode
CreateCompatibleDC
GetClipBox
CreatePen
GetDeviceCaps
SetTextColor
DeleteObject
SelectPalette

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Cntd Jjp
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Xtttue L
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xpsglbf
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dc3c84b4303f2fd23e04269131018056

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 11KB - Virtual size: 11KB

Cntd Jjp Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 25KB

Xtttue L Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 100KB

.rsrc Size: 27KB - Virtual size: 55KB

xpsglbf Size: - Virtual size: 4KB

.text
Size: 11KB - Virtual size: 11KB

Cntd Jjp
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 25KB

Xtttue L
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 100KB

.rsrc
Size: 27KB - Virtual size: 55KB

xpsglbf
Size: - Virtual size: 4KB