2a17deb6f77f251dbe3e901aa57519c662a07de7fc5056c3c824bebab617d186

Sharing

Copy URL Twitter E-mail

General

Target

2a17deb6f77f251dbe3e901aa57519c662a07de7fc5056c3c824bebab617d186
Size

592KB
MD5

0a2e9785a000fde52043bf2ade49b8c8
SHA1

d1d4c629f92c97d916941461545bbbfa4f0ad975
SHA256

2a17deb6f77f251dbe3e901aa57519c662a07de7fc5056c3c824bebab617d186
SHA512

853c392371e1429485d3f8336d20dabf1dafda3e637e504f05eaf29e6faf1987ab71c73efcfa3ab6d421f01c12d88fbd312ad583d4ee36e8b3f5f5869fd1d7d0
SSDEEP

12288:Wd0B4hunEjo5jM19t6IH3HRVvpnkulpbCrc:WCBYJ8U3HR1RLxCrc

Score

N/A

Malware Config

Signatures

Files

2a17deb6f77f251dbe3e901aa57519c662a07de7fc5056c3c824bebab617d186
.exe windows x86

86e48eea76fe43022e25366e9b2ff623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
VerLanguageNameA
GlobalCompact
GetProcAddress
Process32First
GetHandleInformation
lstrcpyW
GetLocalTime
TlsSetValue
VerLanguageNameW
CreateFileMappingA
GetSystemTime
VirtualAlloc
IsValidLocale
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetVersion
GetStartupInfoA

comctl32

ImageList_GetImageCount
ImageList_Destroy
UninitializeFlatSB
ord2
CreatePropertySheetPageA
ImageList_Duplicate
_TrackMouseEvent
ImageList_DragLeave
FlatSB_SetScrollProp
ord14
ord4
CreateStatusWindowW
ord17

opengl32

glColor4d
glCallList
wglDeleteContext
glScissor
glClearColor
wglMakeCurrent
glDrawElements
wglCreateContext

shlwapi

PathRelativePathToW
PathRemoveBlanksW
PathCombineA
SHDeleteOrphanKeyA
PathUnquoteSpacesW
StrNCatA

version

VerInstallFileW
VerFindFileA
VerQueryValueA
VerQueryValueW
VerInstallFileA
GetFileVersionInfoA
VerFindFileW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA

winspool.drv

XcvDataW
DeletePrintProvidorA
DocumentPropertiesA
ord213
AdvancedSetupDialog
GetSpoolFileHandle
PrinterMessageBoxW
StartPagePrinter
OpenPrinterA

msvcrt

memset
_getmbcp
fputs
sprintf
_wutime
_CIsqrt
_wspawnl
fopen
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
fwprintf
_XcptFilter
_exit
_mbslen
_fullpath
ferror
fseek
fprintf
fputc
fread
fclose
feof
ftell
fsetpos
isspace
printf
_spawnve
_unlink
_mbccpy
fwrite

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 544KB - Virtual size: 543KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

86e48eea76fe43022e25366e9b2ff623

Headers

File Characteristics

Imports

kernel32

comctl32

opengl32

shlwapi

version

winspool.drv

msvcrt

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 544KB - Virtual size: 543KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 544KB - Virtual size: 543KB