2f0f0ef7ecb793d98b24da0bf416f847b131896e2924ad662d0e7e5369921bc0

Sharing

Copy URL Twitter E-mail

General

Target

2f0f0ef7ecb793d98b24da0bf416f847b131896e2924ad662d0e7e5369921bc0
Size

325KB
MD5

403732e60ab930769f8974e341ae2fe0
SHA1

5d20367a6b3fd408a925add8970cb7a33374e12d
SHA256

2f0f0ef7ecb793d98b24da0bf416f847b131896e2924ad662d0e7e5369921bc0
SHA512

7cadd105ff5d22d87760ddfddff811eb7aed835b025aa9bbaa3ea8b8dc62aeb8c9b9f93f29d4328c46e9696d5a6641fa18b6541ae86811be4bdea6a6420bef0b
SSDEEP

6144:BFkYYIIVedsS3WTLWevDrVA7O0mfkNqyX0/29ghsh:BFkYYII2MTdvDRw6k4u2297h

Score

N/A

Malware Config

Signatures

Files

2f0f0ef7ecb793d98b24da0bf416f847b131896e2924ad662d0e7e5369921bc0
.dll windows x64

546943fc06b3a1adc24106434539eadf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetLastError
lstrlenW
GetModuleFileNameW
GetLastError
GetModuleHandleW
LockResource
LoadResource
SizeofResource
FindResourceW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GlobalUnlock
GetDateFormatA
GetTimeFormatA
SetFilePointer
ReadFile
CloseHandle
GetFileTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
CreateFileA
CreateFileW
GetVersionExA
GetUserDefaultLCID
WideCharToMultiByte
FreeLibrary
GetLocaleInfoA
MultiByteToWideChar
VirtualFree
GlobalReAlloc
GlobalSize
GetEnvironmentStringsW
MoveFileW
CopyFileW
LoadLibraryA
GetProcAddress
LocalFree
LocalAlloc
RaiseException

winspool.drv

OpenPrinterW
ClosePrinter

ole32

CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
GetClassFile
StgOpenStorageOnILockBytes
StringFromCLSID
StgOpenStorage
CoGetMalloc
CoTaskMemFree
CoTaskMemAlloc

msvcrt

memmove
isalpha
atoi
strncmp
memset
free
malloc
swscanf

Exports

Exports

KeyOSToCompleted

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

546943fc06b3a1adc24106434539eadf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

ole32

msvcrt

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 12KB - Virtual size: 237KB

.pdata Size: 1024B - Virtual size: 372B

.idata Size: 4KB - Virtual size: 3KB

.didat Size: 2KB - Virtual size: 1KB

.pdata Size: 25KB - Virtual size: 24KB

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 1024B - Virtual size: 192B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 12KB - Virtual size: 237KB

.pdata
Size: 1024B - Virtual size: 372B

.idata
Size: 4KB - Virtual size: 3KB

.didat
Size: 2KB - Virtual size: 1KB

.pdata
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 1024B - Virtual size: 192B