abbd267a7657068734d5d471ed87f34efa6ec89c879c4eba15092cd1b4c5e807

Sharing

Copy URL

Twitter E-mail

General

Target

abbd267a7657068734d5d471ed87f34efa6ec89c879c4eba15092cd1b4c5e807
Size

220KB
MD5

5c3a7af592a5687a3a85ad45c738759e
SHA1

4112e4fd6dabd119201937b9311ea0944de41cc5
SHA256

abbd267a7657068734d5d471ed87f34efa6ec89c879c4eba15092cd1b4c5e807
SHA512

96a9729914aaca514853b483c7b202c4bb1904f8c15e96c0389fa9e379058f1b9a0a6f8b7d8adfe4d39bf22fadccfb91e9065cc89269e6ecb3bfa8883438b611
SSDEEP

3072:7Sb6VqMD+YaDwckQO5aOszsLOlkyFjX6OlzyZQa:26VqMD+k4BAL0k4zxWQa

Score

N/A

Malware Config

Signatures

Files

abbd267a7657068734d5d471ed87f34efa6ec89c879c4eba15092cd1b4c5e807
.exe windows x86

a1bb8245a60d9b867002e6e08f22f700

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
HeapSize
Sleep
HeapFree
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
EnterCriticalSection
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetCPInfo
VirtualProtect
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
GetCommandLineW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetStringTypeW

winspool.drv

DeletePrintProvidorW
DeletePrinterDriverW
FindClosePrinterChangeNotification
DeleteFormW

comdlg32

GetFileTitleA
GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameW
PageSetupDlgA

wsock32

ntohs
ntohl
ord1120
WSAIsBlocking
WSAAsyncGetHostByName
WSASetLastError
WSAAsyncSelect
ord1100
ord1117
ord1107
ord1119
ord1111
WSACleanup

rtutils

TracePrintfA
TracePutsExA
RouterLogEventStringW
TraceDumpExA

glu32

gluBeginCurve
gluOrtho2D
gluQuadricCallback
gluTessEndContour
gluScaleImage
gluCylinder
gluErrorUnicodeStringEXT

ole32

OleRegGetMiscStatus
CoResumeClassObjects
StringFromCLSID
OleCreateLink
HENHMETAFILE_UserMarshal
ReadFmtUserTypeStg
CreateDataCache

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1bb8245a60d9b867002e6e08f22f700

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

comdlg32

wsock32

rtutils

glu32

ole32

Sections

.text Size: 42KB - Virtual size: 42KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 6KB - Virtual size: 6KB