42a0178389fe7634fb6b0bc383f48468e50b1fdeeb61584a452bc1d1f7dd3ede

Sharing

Copy URL Twitter E-mail

General

Target

42a0178389fe7634fb6b0bc383f48468e50b1fdeeb61584a452bc1d1f7dd3ede
Size

594KB
MD5

83b2518b993bd85964fa98fc5a83bd23
SHA1

a244613bfdb2e239372192dbf63237078d5f0022
SHA256

42a0178389fe7634fb6b0bc383f48468e50b1fdeeb61584a452bc1d1f7dd3ede
SHA512

b7fdd2537e7bed98a3878aafbdb949a7197d97b3ac720925bd08c0dd6cb31f2e9e027e81545164e57055e06610cafcbfffa0638bdc13faf87d0b189ee8a12bcc
SSDEEP

12288:Wd0B4hunEjo5jM19t6IH3HRVvpnkulpbCr1:WCBYJ8U3HR1RLxCr1

Score

N/A

Malware Config

Signatures

Files

42a0178389fe7634fb6b0bc383f48468e50b1fdeeb61584a452bc1d1f7dd3ede
.exe windows x86

86e48eea76fe43022e25366e9b2ff623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
VerLanguageNameA
GlobalCompact
GetProcAddress
Process32First
GetHandleInformation
lstrcpyW
GetLocalTime
TlsSetValue
VerLanguageNameW
CreateFileMappingA
GetSystemTime
VirtualAlloc
IsValidLocale
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetVersion
GetStartupInfoA

comctl32

ImageList_GetImageCount
ImageList_Destroy
UninitializeFlatSB
ord2
CreatePropertySheetPageA
ImageList_Duplicate
_TrackMouseEvent
ImageList_DragLeave
FlatSB_SetScrollProp
ord14
ord4
CreateStatusWindowW
ord17

opengl32

glColor4d
glCallList
wglDeleteContext
glScissor
glClearColor
wglMakeCurrent
glDrawElements
wglCreateContext

shlwapi

PathRelativePathToW
PathRemoveBlanksW
PathCombineA
SHDeleteOrphanKeyA
PathUnquoteSpacesW
StrNCatA

version

VerInstallFileW
VerFindFileA
VerQueryValueA
VerQueryValueW
VerInstallFileA
GetFileVersionInfoA
VerFindFileW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA

winspool.drv

XcvDataW
DeletePrintProvidorA
DocumentPropertiesA
ord213
AdvancedSetupDialog
GetSpoolFileHandle
PrinterMessageBoxW
StartPagePrinter
OpenPrinterA

msvcrt

memset
_getmbcp
fputs
sprintf
_wutime
_CIsqrt
_wspawnl
fopen
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
fwprintf
_XcptFilter
_exit
_mbslen
_fullpath
ferror
fseek
fprintf
fputc
fread
fclose
feof
ftell
fsetpos
isspace
printf
_spawnve
_unlink
_mbccpy
fwrite

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 544KB - Virtual size: 543KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

86e48eea76fe43022e25366e9b2ff623

Headers

File Characteristics

Imports

kernel32

comctl32

opengl32

shlwapi

version

winspool.drv

msvcrt

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 544KB - Virtual size: 543KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 544KB - Virtual size: 543KB