601e17f5db6e87adae792d1938a460ec59155781d768daae80089a09bd1178b6

Sharing

Copy URL Twitter E-mail

General

Target

601e17f5db6e87adae792d1938a460ec59155781d768daae80089a09bd1178b6
Size

317KB
MD5

2008490aa0c7a7c913d27154e3422df0
SHA1

b6032bdddf7e94fbdbb75e4206811e0ba1fc411d
SHA256

601e17f5db6e87adae792d1938a460ec59155781d768daae80089a09bd1178b6
SHA512

ad893cfa59a16694e68a85ee578eff4dc03dee96a88f09266734a2bf0ead9ff05351dd819a03afc2d6095f3a313f82ce4793cee689ee9fb04142c70d19578e19
SSDEEP

6144:FGnG1LHCbjKmGw1ojrSuxBAMFvXAIk9t7THX9Z/UicUi/mvkLPfYUoSb+:FGnG1LHQ33WrSyY/9JTX9JHqmvkjfYQ

Score

N/A

Malware Config

Signatures

Files

601e17f5db6e87adae792d1938a460ec59155781d768daae80089a09bd1178b6
.exe windows x86

0380470722362df28ce818eacbc6162d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBindToParent
SHInvokePrinterCommandW
ord155
ord180
SHGetFileInfoW
ord688
ord89
ord727
ord178
ord73

comctl32

DestroyPropertySheetPage
PropertySheetW
InitCommonControlsEx
ImageList_GetImageCount
PropertySheetA

kernel32

FindNextFileA
DeviceIoControl
SetProcessWorkingSetSize
LocalLock
OutputDebugStringA
GetWindowsDirectoryW
GetVersion
OpenFileMappingA
WaitForDebugEvent
FileTimeToDosDateTime
lstrcmpA
CreateProcessW
HeapFree
GetTickCount
VirtualFree
GetProcessHeap
VirtualQueryEx
GetDriveTypeA
GetStringTypeExW
ReadFile

user32

LoadAcceleratorsA
DefWindowProcA
TrackPopupMenuEx
DefMDIChildProcW
DrawStateA
ShowCursor
EnumDisplaySettingsA
OemToCharBuffW
DialogBoxIndirectParamW
GetKeyState
RegisterWindowMessageW
SetActiveWindow
SetProcessWindowStation
SetWindowRgn
GetUserObjectInformationA
FindWindowA
SetWindowTextW
MessageBoxExA
GetDialogBaseUnits
OemToCharBuffA
GetMenuItemRect

gdi32

SetPaletteEntries
SetBkColor
CreateICW
PathToRegion

Exports

Exports

?sesmic@@YGKPA_K@Z

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.closer
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cpp
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.artp
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dctp
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gktp
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdtp
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iftp
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdat1
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdat2
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdat3
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0380470722362df28ce818eacbc6162d

Headers

DLL Characteristics

File Characteristics

Imports

shell32

comctl32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 49KB

.closer Size: 61KB - Virtual size: 60KB

.cpp Size: 2KB - Virtual size: 1KB

.artp Size: 1KB - Virtual size: 1KB

.dctp Size: 3KB - Virtual size: 2KB

.gktp Size: 1024B - Virtual size: 808B

.cdtp Size: 1024B - Virtual size: 812B

.iftp Size: 1024B - Virtual size: 920B

.data Size: 13KB - Virtual size: 13KB

.rdat1 Size: 55KB - Virtual size: 54KB

.rdat2 Size: 87KB - Virtual size: 87KB

.rdat3 Size: 33KB - Virtual size: 32KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 49KB - Virtual size: 49KB

.closer
Size: 61KB - Virtual size: 60KB

.cpp
Size: 2KB - Virtual size: 1KB

.artp
Size: 1KB - Virtual size: 1KB

.dctp
Size: 3KB - Virtual size: 2KB

.gktp
Size: 1024B - Virtual size: 808B

.cdtp
Size: 1024B - Virtual size: 812B

.iftp
Size: 1024B - Virtual size: 920B

.data
Size: 13KB - Virtual size: 13KB

.rdat1
Size: 55KB - Virtual size: 54KB

.rdat2
Size: 87KB - Virtual size: 87KB

.rdat3
Size: 33KB - Virtual size: 32KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 5KB - Virtual size: 5KB