6ea18707524fa0c9f690f1af9f2200d506ba696d2c1580ea89bc4e2108a9223c

Sharing

Copy URL Twitter E-mail

General

Target

6ea18707524fa0c9f690f1af9f2200d506ba696d2c1580ea89bc4e2108a9223c
Size

4.0MB
MD5

b80b523e1e032a61d20330e7b151a05a
SHA1

af615fe7ba96756e6f7b1ad1696071d56b6afb6e
SHA256

6ea18707524fa0c9f690f1af9f2200d506ba696d2c1580ea89bc4e2108a9223c
SHA512

335cfb691621d987bc655eeaa880cc731b43965c5aeaabe2a03976e6c60a5fd9e8a5ad4319531722928c4205ecd8ae67493f56f3872207c2bce08137f88b053a
SSDEEP

98304:dVb/5rcwsJ4TGbxnvA+EpRMsPF9N414X3:dVxrrGbxn4ZRMyF9Nn

Score

N/A

Malware Config

Signatures

Files

6ea18707524fa0c9f690f1af9f2200d506ba696d2c1580ea89bc4e2108a9223c
.exe windows x86

d73ba98ec2afdd127fa09b1051616648

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SafeArrayPtrOfIndex

advapi32

RegDeleteValueA

user32

CharNextA

kernel32

GetVersion
GetVersionExA
EnumResourceNamesA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

SetPixel

version

GetFileVersionInfoA

ole32

CoInitialize

comctl32

ImageList_GetImageCount

shell32

Shell_NotifyIconA

winspool.drv

EnumPrintersA

wsock32

ntohs

gdiplus

GdipCreateHBITMAPFromBitmap

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 68KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 68B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d73ba98ec2afdd127fa09b1051616648

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

shell32

winspool.drv

wsock32

gdiplus

Sections

.text Size: - Virtual size: 1.1MB

.itext Size: - Virtual size: 3KB

.data Size: - Virtual size: 18KB

.bss Size: - Virtual size: 68KB

.idata Size: - Virtual size: 13KB

.tls Size: - Virtual size: 68B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 2.9MB

.vmp1 Size: 3.8MB - Virtual size: 3.8MB

.reloc Size: 512B - Virtual size: 300B

.rsrc Size: 196KB - Virtual size: 195KB

.text
Size: - Virtual size: 1.1MB

.itext
Size: - Virtual size: 3KB

.data
Size: - Virtual size: 18KB

.bss
Size: - Virtual size: 68KB

.idata
Size: - Virtual size: 13KB

.tls
Size: - Virtual size: 68B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 2.9MB

.vmp1
Size: 3.8MB - Virtual size: 3.8MB

.reloc
Size: 512B - Virtual size: 300B

.rsrc
Size: 196KB - Virtual size: 195KB