c7dd4f0921b34e3777ff9d07aa7aea07e86e4d5b8971e62172ad510f4e0fcc09

General

Target

c7dd4f0921b34e3777ff9d07aa7aea07e86e4d5b8971e62172ad510f4e0fcc09
Size

389KB
MD5

903e14d82cc9afb9800888d4f06fc1c0
SHA1

4597857d5bf29cf5f625624746fc7afdf81a16f3
SHA256

c7dd4f0921b34e3777ff9d07aa7aea07e86e4d5b8971e62172ad510f4e0fcc09
SHA512

78feabf9eb2832a0fd4ca39d977bacf05376b59153618e392d5ac8f133d82b4d1f3925fb9e1da722eef547db1fab9dcfb53975f18c3a1df169094fe0bdc735a9
SSDEEP

6144:44LCYjmG9BMPwpQdaBHMFzVAPQMHGAw15iPAr0wTCLX9DRKfmN0tRClzv9:4JfG9MwppBHMJ6IMm52XLef6Icr9

Score

N/A

Malware Config

Signatures

Files

c7dd4f0921b34e3777ff9d07aa7aea07e86e4d5b8971e62172ad510f4e0fcc09
.exe windows x86

0faa0e8643c37b03c74aff3580737bad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrlenA
VirtualProtect
VirtualAlloc
SetLocaleInfoW
LocalAlloc
LoadLibraryW
GlobalAlloc
GetSystemTime
GetProcAddress
GetModuleHandleW
GetCurrentThreadId
ExitThread
ExitProcess
CreateThread
CreateFiber
ConvertThreadToFiber
CloseHandle
CancelIo
ChangeTimerQueueTimer

advapi32

RegRestoreKeyA
RegConnectRegistryA

gdi32

CancelDC
AngleArc

mpr

WNetGetResourceParentA
WNetAddConnectionW

user32

SetCaretBlinkTime
RealGetWindowClassW
PostMessageW
IntersectRect
GetWindowTextA
GetGUIThreadInfo
GetCursorInfo
FindWindowA
DrawIconEx

version

GetFileVersionInfoSizeA

winspool.drv

EnumPrintersA

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 334KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 276B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0faa0e8643c37b03c74aff3580737bad

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

mpr

user32

version

winspool.drv

Sections

CODE Size: 22KB - Virtual size: 21KB

DATA Size: 334KB - Virtual size: 333KB

BSS Size: - Virtual size: 13B

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: - Virtual size: 276B

.rsrc Size: 31KB - Virtual size: 35KB

CODE
Size: 22KB - Virtual size: 21KB

DATA
Size: 334KB - Virtual size: 333KB

BSS
Size: - Virtual size: 13B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: - Virtual size: 276B

.rsrc
Size: 31KB - Virtual size: 35KB