4396b6edbf4a5f23d90bae96376996f2a36f12cd5a1320d0195ed9674c046af8

Sharing

Copy URL Twitter E-mail

General

Target

4396b6edbf4a5f23d90bae96376996f2a36f12cd5a1320d0195ed9674c046af8
Size

712KB
MD5

6db00045b3803bf86d9ef69b057e58f0
SHA1

9802aa4f7864edc1fd07075ca3a46476337792a3
SHA256

4396b6edbf4a5f23d90bae96376996f2a36f12cd5a1320d0195ed9674c046af8
SHA512

c4bf05c4e7393018ab04a90f6e1dc4b79c7722f54c35543a815a6e9fe83ff539bf898f16feca2f1c5a41dc1b018aad5c9b2753f889e94a20b091c29901c5e0c9
SSDEEP

12288:i+9hQrBltEpdDYUTIBO7+i9s3FjaKIcAxRWO/0qWPgI7v+btWCOiUV5:i+TuWKslrKIzZqPgIb+xWniUV

Score

N/A

Malware Config

Signatures

Files

4396b6edbf4a5f23d90bae96376996f2a36f12cd5a1320d0195ed9674c046af8
.exe windows x86

595e6eb9de1797dee5b1f614f4cd3695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAConnect
WSAGetOverlappedResult
WSASocketW
WSAStartup
WSACleanup

mscms

CreateDeviceLinkProfile
SetStandardColorSpaceProfileW
UninstallColorProfileW
GetColorDirectoryW
IsColorProfileTagPresent
SetColorProfileHeader
SetColorProfileElementReference
ConvertColorNameToIndex
DisassociateColorProfileFromDeviceW
InstallColorProfileW
AssociateColorProfileWithDeviceW
OpenColorProfileW
GetColorProfileHeader
GetColorProfileElement
TranslateColors
GetCMMInfo
ConvertIndexToColorName
GetPS2ColorRenderingDictionary
GetPS2ColorSpaceArray
EnumColorProfilesW
CreateProfileFromLogColorSpaceW
SelectCMM
RegisterCMMW
DeleteColorTransform
CreateMultiProfileTransform
GetColorProfileFromHandle
GetCountColorProfileElements
SetColorProfileElementSize
GetPS2ColorRenderingIntent
GetNamedProfileInfo
TranslateBitmapBits
CreateColorTransformW
IsColorProfileValid
CheckBitmapBits
GetStandardColorSpaceProfileW
CloseColorProfile
UnregisterCMMW
GetColorProfileElementTag
SetColorProfileElement
CheckColors

kernel32

RaiseException
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
Sleep
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleHandleW
GetVersionExW
GetSystemTime
QueryPerformanceCounter
GetVolumeInformationW
GetProcAddress
GetNativeSystemInfo
SetSystemTimeAdjustment
GetDateFormatW
OpenProcess
CreateFileW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
GetLastError
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings

Sections

.text
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

595e6eb9de1797dee5b1f614f4cd3695

Headers

File Characteristics

Imports

ws2_32

mscms

kernel32

Sections

.text Size: 480KB - Virtual size: 480KB

.rdata Size: 154KB - Virtual size: 153KB

.data Size: 75KB - Virtual size: 108KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 480KB - Virtual size: 480KB

.rdata
Size: 154KB - Virtual size: 153KB

.data
Size: 75KB - Virtual size: 108KB

.rsrc
Size: 2KB - Virtual size: 1KB