d7ebffedef1c4713d29db9f6cd07dcd62bfd88929ee1bad55e54b8850934d835

Sharing

Copy URL Twitter E-mail

General

Target

d7ebffedef1c4713d29db9f6cd07dcd62bfd88929ee1bad55e54b8850934d835
Size

592KB
MD5

667ecb653f77563b2bde745553d233f0
SHA1

0972e3275b0440a53ab6f6f70946ccf676930f21
SHA256

d7ebffedef1c4713d29db9f6cd07dcd62bfd88929ee1bad55e54b8850934d835
SHA512

fd1c1d51382244fb36287328ac8e928be89ad4841797c223c892eb84fa937deb96398808bf72428de7975057a6652895bd6bff4b7f2bb1b68ec45206964c6a07
SSDEEP

12288:Dd0B4hunEjo5jM19t6IH3HRVvpnkulpbCrm:DCBYJ8U3HR1RLxCrm

Score

N/A

Malware Config

Signatures

Files

d7ebffedef1c4713d29db9f6cd07dcd62bfd88929ee1bad55e54b8850934d835
.exe windows x86

86e48eea76fe43022e25366e9b2ff623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
VerLanguageNameA
GlobalCompact
GetProcAddress
Process32First
GetHandleInformation
lstrcpyW
GetLocalTime
TlsSetValue
VerLanguageNameW
CreateFileMappingA
GetSystemTime
VirtualAlloc
IsValidLocale
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetVersion
GetStartupInfoA

comctl32

ImageList_GetImageCount
ImageList_Destroy
UninitializeFlatSB
ord2
CreatePropertySheetPageA
ImageList_Duplicate
_TrackMouseEvent
ImageList_DragLeave
FlatSB_SetScrollProp
ord14
ord4
CreateStatusWindowW
ord17

opengl32

glColor4d
glCallList
wglDeleteContext
glScissor
glClearColor
wglMakeCurrent
glDrawElements
wglCreateContext

shlwapi

PathRelativePathToW
PathRemoveBlanksW
PathCombineA
SHDeleteOrphanKeyA
PathUnquoteSpacesW
StrNCatA

version

VerInstallFileW
VerFindFileA
VerQueryValueA
VerQueryValueW
VerInstallFileA
GetFileVersionInfoA
VerFindFileW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA

winspool.drv

XcvDataW
DeletePrintProvidorA
DocumentPropertiesA
ord213
AdvancedSetupDialog
GetSpoolFileHandle
PrinterMessageBoxW
StartPagePrinter
OpenPrinterA

msvcrt

memset
_getmbcp
fputs
sprintf
_wutime
_CIsqrt
_wspawnl
fopen
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
fwprintf
_XcptFilter
_exit
_mbslen
_fullpath
ferror
fseek
fprintf
fputc
fread
fclose
feof
ftell
fsetpos
isspace
printf
_spawnve
_unlink
_mbccpy
fwrite

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 544KB - Virtual size: 543KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

86e48eea76fe43022e25366e9b2ff623

Headers

File Characteristics

Imports

kernel32

comctl32

opengl32

shlwapi

version

winspool.drv

msvcrt

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 544KB - Virtual size: 543KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 544KB - Virtual size: 543KB