72ae3fcc4adec4adde0d150a5a8089b400bd9bbab2748c2750048d70de7dfc69

Sharing

Copy URL Twitter E-mail

General

Target

72ae3fcc4adec4adde0d150a5a8089b400bd9bbab2748c2750048d70de7dfc69
Size

238KB
MD5

000e78409e4985a404c0518fee156dc0
SHA1

2b594e2fe3dedb92110484bf2008714cb7e7c58e
SHA256

72ae3fcc4adec4adde0d150a5a8089b400bd9bbab2748c2750048d70de7dfc69
SHA512

fe3032a0128535f2701a70b0c62fdd768514fdeb8d649a594d66d06f2880719dc5798dbab897bbb8294402b9f4e87f19d7a6e864cd1fc5c60a0553f257fea703
SSDEEP

1536:n9KwNjMI9h1SoodVdkmVnTA6uvcXS5pSy+p4y9eMH5ZzcBQmU6Y5rJ7w5HaeWh:nhMIFSooJ8prykMH5ZzLTz

Score

N/A

Malware Config

Signatures

Files

72ae3fcc4adec4adde0d150a5a8089b400bd9bbab2748c2750048d70de7dfc69
.exe windows x86

30deec6579f48261855708cba9a37fd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
SetStdHandle
FlushFileBuffers
LCMapStringA
LocalFree
GetCPInfo
LCMapStringW
GetStringTypeA
GetStringTypeW
LocalAlloc
GetModuleHandleA
GetOEMCP
SetFilePointer
WriteFile
LoadLibraryA
GetProcAddress
GetCurrentProcess
GetVersion
GetSystemDirectoryA
CopyFileA
GetLastError
FormatMessageA
DeleteFileA
GetACP
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
CloseHandle

user32

DialogBoxIndirectParamA
LoadCursorA
SetCursor
InflateRect
GetDlgItem
GetSysColorBrush
EndDialog
SetWindowTextA
SendMessageA

gdi32

StartDocA
GetDeviceCaps
SetMapMode
StartPage
EndPage
EndDoc

comdlg32

PrintDlgA

advapi32

RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
AllocateAndInitializeSid
CheckTokenMembership
FreeSid

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

famnuv
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 84KB - Virtual size: 81KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

30deec6579f48261855708cba9a37fd6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 112KB - Virtual size: 113KB

famnuv Size: - Virtual size: 4KB

Size: 84KB - Virtual size: 81KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 112KB - Virtual size: 113KB

famnuv
Size: - Virtual size: 4KB