72a0c4c8fc483028db05c48c969ff0f5deada1614ee92cf15e66d451e003a879

Sharing

Copy URL

Twitter E-mail

General

Target

72a0c4c8fc483028db05c48c969ff0f5deada1614ee92cf15e66d451e003a879
Size

47KB
MD5

44cf7fed73a4e207409a80684cb0fe05
SHA1

ca0d81650753d4e442d825c8dff4d983241f2cf0
SHA256

72a0c4c8fc483028db05c48c969ff0f5deada1614ee92cf15e66d451e003a879
SHA512

5fc9db0a86679321a710a9f74f02209d9341c24ef9dd3fa235668423a58917b123c23eeda71915424847dcedf919a5f15889280b7b231273907d1e8559391b2c
SSDEEP

768:wCSZA9RTpThgdzpZg5+3D22XZ5Epnjiwlegjt0zV2MPouJctrO6:wCSZ+glj3zp5EpXXO52MA9O6

Score

N/A

Malware Config

Signatures

Files

72a0c4c8fc483028db05c48c969ff0f5deada1614ee92cf15e66d451e003a879
.exe windows x86

c2f83ae3bab491eb9d98819ce997401f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
FreeConsole
GetModuleHandleA
GetProcAddress
GetStdHandle
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleFileNameW
EnumResourceLanguagesW
FormatMessageW
DeleteCriticalSection
GetCurrentThreadId
MultiByteToWideChar
TlsSetValue
GlobalGetAtomNameW
GlobalDeleteAtom
GlobalFlags

shell32

ShellExecuteW
DragFinish
ShellExecuteExW
DragQueryFileW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

oledlg

OleUIBusyW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

user32

SendMessageW
GetNextDlgTabItem
EnableWindow
TranslateAcceleratorW
GetSystemMetrics

advapi32

RegOpenKeyW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW

shlwapi

PathIsUNCW
PathFindExtensionW
PathFindFileNameW

imagehlp

BindImageEx

ole32

CLSIDFromProgID
RegisterDragDrop
CLSIDFromString
CoCreateInstance
OleFlushClipboard
CoRegisterMessageFilter
OleInitialize
CoFreeUnusedLibraries

comctl32

ImageList_Destroy
ImageList_Add
ImageList_GetIconSize

gdi32

SetTextColor
FillRgn
SetMapMode
GetViewportExtEx
SetPixel

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c2f83ae3bab491eb9d98819ce997401f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

comdlg32

oledlg

winspool.drv

user32

advapi32

shlwapi

imagehlp

ole32

comctl32

gdi32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 94KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 94KB