d4adc6c94fa107a1a2c1dfcc56160eea80b18ae7989c6749f2d1cd4b32065c06

Sharing

Copy URL Twitter E-mail

General

Target

d4adc6c94fa107a1a2c1dfcc56160eea80b18ae7989c6749f2d1cd4b32065c06
Size

231KB
MD5

6cfc5aa8ac715a0e1416f52fea3b1f90
SHA1

78f8adffff669a0a4020254c210796e1bc10c741
SHA256

d4adc6c94fa107a1a2c1dfcc56160eea80b18ae7989c6749f2d1cd4b32065c06
SHA512

83199d73021c29de88afa2e26e4eda755fc6a014f41f94105be7d76a187597dfe2399cd84bd591686be151c1b66cbd92ac94c45b7e50d3cf596583703a40113a
SSDEEP

6144:RHN6VVFkMXzrrO14PP75A5LMSiatOnq98Gs:RHNeVFk514Pj25LMvaone8B

Score

N/A

Malware Config

Signatures

Files

d4adc6c94fa107a1a2c1dfcc56160eea80b18ae7989c6749f2d1cd4b32065c06
.exe windows x86

da98f2d75168dff0592693ad3df9cd40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
SetFilePointer
WriteConsoleW
CloseHandle
IsProcessorFeaturePresent
GetStringTypeW
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetCurrentProcessId
GetTickCount
CreateFileW
HeapCreate
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
GetLocaleInfoW
TlsGetValue
TlsAlloc
LoadLibraryW
DeleteCriticalSection
lstrcpyA
LocalFree
GetVersionExA
WritePrivateProfileStringA
LocalAlloc
GlobalFree
VerLanguageNameA
GetCurrentDirectoryW
QueryPerformanceCounter
GetLastError
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
Sleep
GlobalAlloc
InitializeCriticalSection
EnterCriticalSection
EncodePointer
GetModuleFileNameW
GetStdHandle
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
GetProcessHeap
GetLogicalDrives
ExitProcess
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
HeapFree
InterlockedDecrement
TlsSetValue
HeapAlloc

user32

IsWindowVisible
GetWindow
RegisterDeviceNotificationA
SetWindowTextW
LoadCursorA
SetWindowTextA
UpdateWindow
FillRect
SystemParametersInfoA
DispatchMessageA
GetMessageA
GetClassNameA
GetSystemMenu
GetWindowRect
RegisterClassExA
GetWindowDC
CreateWindowExW
IsChild
DrawTextW
KillTimer
LoadStringA
GetParent
LoadIconA
IsWindowEnabled
GetClientRect
BeginPaint
EnumWindows
GetDC
TranslateMessage
GetGUIThreadInfo
SetRect
SetWindowLongA
GetScrollInfo
MessageBoxA
AppendMenuW
GetWindowLongA
CreateWindowExA
GetDlgItem
EndDialog
GetSysColor
CheckDlgButton
ShowWindow
DestroyMenu

gdi32

MoveToEx
AddFontResourceA
BitBlt
ExtFloodFill
SetTextColor
DeleteDC
GetRgnBox
DeleteObject
SelectObject
SetMapMode
CreateCompatibleBitmap
Polyline
GetStockObject
UpdateColors
CreateEllipticRgn

winspool.drv

ClosePrinter

comdlg32

FindTextW

advapi32

InitializeAcl

shell32

SHGetFileInfoA
SHGetFolderLocation
ord155

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

oleaut32

SafeArrayCreateVector
SafeArrayDestroy
VariantInit
VariantClear

mpr

WNetGetUniversalNameA

avicap32

capCreateCaptureWindowW

msimg32

AlphaBlend

shlwapi

StrStrW
PathIsUNCW

comctl32

ImageList_Draw
ord17

gdiplus

GdiplusStartup
GdipGetImageEncodersSize
GdiplusShutdown

oleacc

GetStateTextA
CreateStdAccessibleObject

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.radata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da98f2d75168dff0592693ad3df9cd40

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

mpr

avicap32

msimg32

shlwapi

comctl32

gdiplus

oleacc

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 9KB - Virtual size: 16KB

.radata Size: 147KB - Virtual size: 146KB

.edata Size: 4KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 9KB - Virtual size: 16KB

.radata
Size: 147KB - Virtual size: 146KB

.edata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 6KB - Virtual size: 6KB