0d939f676bc4da90a40be3dd528321088f161544c0677ec2a787528a00b39175

Sharing

Copy URL Twitter E-mail

General

Target

0d939f676bc4da90a40be3dd528321088f161544c0677ec2a787528a00b39175
Size

172KB
MD5

a18758d2e9b605c2bfe0e32812616040
SHA1

49ffb7437371c10746620df413c96301ec8ffe4a
SHA256

0d939f676bc4da90a40be3dd528321088f161544c0677ec2a787528a00b39175
SHA512

54e03c523261bbc8c0ab5096a72f9af539b623acc8f6cc792043b68fb598fbe0c35209061a8cfd4cdd95dd1a0f1c29a9205eb9dff8368a95d1faf503b6e7dbb8
SSDEEP

3072:l2T/cay+spHMe88eqM/BtK7SvIOL2hVYeu7Erb7tadAHALyq:3ayTMe88eqsTVD8+eJ/5hgLyq

Score

N/A

Malware Config

Signatures

Files

0d939f676bc4da90a40be3dd528321088f161544c0677ec2a787528a00b39175
.exe windows x86

ddccde856a5559b5b52cf9a962b85244

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushViewOfFile
InitializeCriticalSection
GetVersion
GetAtomNameW
LoadLibraryExW
GetSystemWindowsDirectoryW
SetCommMask
LoadResource
MoveFileA
CreateWaitableTimerA
GetSystemTime
LocalFree
GetPriorityClass
TryEnterCriticalSection

Exports

Exports

IncrementSystemNew
OnScreenW
FormatHeaderNew
ModifyListA
RemoveDeviceOriginal
ShowPointerOriginal
CallAppNameW
GetListItemOld
PutRectEx
FormatFolderPathExW
ValidateRectOriginal
GenerateFolderPath
CallVersionEx
ModifyStringNew
CallPointEx
OnScreenOld
KillDataNew
CrtScreenEx
ShowValueOld
SendMutantOriginal
CopyFunctionNew
FindMutantExW
GlobalHeaderEx
CallFullNameOriginal
ValidateThreadEx
IsNotRectNew
IsValidCharOld
SendPenA
LoadStateExW
CopyProjectNew
FindMediaTypeEx
InstallEventExW

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.On59
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Eh0887
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nus
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 23KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sty
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Racy
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Lax503
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddccde856a5559b5b52cf9a962b85244

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 136KB

.On59 Size: 512B - Virtual size: 378B

.Eh0887 Size: 512B - Virtual size: 28B

.Nus Size: 512B - Virtual size: 101B

.Re82 Size: 23KB - Virtual size: 26KB

.Sty Size: 512B - Virtual size: 64B

.Racy Size: 512B - Virtual size: 64B

.Lax503 Size: 1024B - Virtual size: 584B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 175B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 136KB - Virtual size: 136KB

.On59
Size: 512B - Virtual size: 378B

.Eh0887
Size: 512B - Virtual size: 28B

.Nus
Size: 512B - Virtual size: 101B

.Re82
Size: 23KB - Virtual size: 26KB

.Sty
Size: 512B - Virtual size: 64B

.Racy
Size: 512B - Virtual size: 64B

.Lax503
Size: 1024B - Virtual size: 584B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 175B

.reloc
Size: 5KB - Virtual size: 5KB