4c6d0a9d656333d92699d04d161915383a7a1264b5ed5fa0ed7099f6d7a4a11a

Sharing

Copy URL Twitter E-mail

General

Target

4c6d0a9d656333d92699d04d161915383a7a1264b5ed5fa0ed7099f6d7a4a11a
Size

201KB
MD5

09016c6e727a94e8a60dad296ca53ed0
SHA1

563fd48f73e58b8f77c80e8a755143f1775501c6
SHA256

4c6d0a9d656333d92699d04d161915383a7a1264b5ed5fa0ed7099f6d7a4a11a
SHA512

0923554327dff7e102d9ec64764d4a36e971eba8b3899a847033b2b0b0cd13804862d22c7e0ee7a6e15f358c6e662dd9ca8dbaeeea0fef3a7d25a30dc74f7cad
SSDEEP

3072:7cDRk1xu9mh0nYSOhSO6AhbGhW3l0MXPmlW+TR9yc1o:EGpfSVOtb/nPuT

Score

N/A

Malware Config

Signatures

Files

4c6d0a9d656333d92699d04d161915383a7a1264b5ed5fa0ed7099f6d7a4a11a
.dll windows x86

472550cc76be68d4ecf24a940c5c5c87

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
CloseHandle
CreateFileW

user32

BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
LoadIconA

gdi32

DPtoLP
DeleteColorSpace
DeviceCapabilitiesExW
EnableEUDC
EndDoc
EngAcquireSemaphore
EngCheckAbort
EngCreateClip
EngCreateDeviceBitmap
EngCreateDeviceSurface
EngCreatePalette
EngDeletePath
EngFindResource
EngGetDriverName
EngGradientFill
EngQueryLocalTime
EngReleaseSemaphore
EngTextOut
EnumEnhMetaFile
EudcLoadLinkW
FONTOBJ_cGetGlyphs
FONTOBJ_pxoGetXform
FrameRgn
GdiComment
GdiConvertEnhMetaFile
GdiConvertMetaFilePict
GdiCreateLocalEnhMetaFile
GdiEntry11
GdiEntry2
GdiGetBatchLimit
GdiGetPageHandle
GdiInitializeLanguagePack
GdiPlayDCScript
GdiPlayJournal
GdiSetBatchLimit
GdiSetServerAttr
GdiSwapBuffers
CreatePolygonRgn
GetCharWidthA
GetColorAdjustment
GetEnhMetaFileDescriptionA
GetEnhMetaFileDescriptionW
GetEnhMetaFilePaletteEntries
GetFontData
GetFontLanguageInfo
GetFontUnicodeRanges
GetMapMode
GetMiterLimit
GetObjectA
GetPolyFillMode
GetROP2
GetStretchBltMode
HT_Get8BPPFormatPalette
InvertRgn
LPtoDP
LineTo
OffsetRgn
PATHOBJ_vEnumStart
PlayEnhMetaFileRecord
PolyBezier
PolyDraw
PolyPolyline
PolyTextOutW
PtVisible
RemoveFontResourceExW
ScaleViewportExtEx
SelectClipRgn
SetBrushOrgEx
SetEnhMetaFileBits
SetFontEnumeration
SetMapperFlags
SetPixelFormat
SetPixelV
SetPolyFillMode
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetViewportOrgEx
XLATEOBJ_cGetPalette
CreatePolyPolygonRgn
CreateICW
CreateFontIndirectExA
CreateDiscardableBitmap
CreateDIBitmap
CreateDCW
CreateCompatibleDC
AnimatePalette
CopyMetaFileW
CopyEnhMetaFileW
CloseEnhMetaFile
CLIPOBJ_ppoGetPath
GetBoundsRect

comdlg32

PageSetupDlgW
PageSetupDlgA
PrintDlgA
PrintDlgExA
PrintDlgExW
GetFileTitleA
ReplaceTextW
ReplaceTextA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
PrintDlgW

advapi32

RegOpenKeyExW
RegOpenKeyW

msvcrt

_CIatan
_EH_prolog
_Getdays
_XcptFilter
__RTDynamicCast
__RTtypeid
__argv
__p___argc
__p__amblksiz
__p__dstbias
__p__pctype
__unDNameEx
_adj_fdivr_m32
_adj_fdivr_m32i
_atoi64
_beginthreadex
_cexit
_clearfp
_environ
_execl
_fdopen
_filbuf
_findfirst
_findfirsti64
_findnexti64
_fsopen
_ftime64
_gmtime64
_initterm
_ismbbgraph
_ismbbpunct
_ismbcalnum
_itoa
_ltow
_mbsnbcmp
_mbsnicmp
_mbsninc
_mbsspnp
_onexit
_spawnl
_spawnlp
_stat
_strdup
_strtime
_sys_errlist
_tell
_timezone
_unlock
_waccess
_wcmdln
_wcsdup
_wcsncoll
_wenviron
_wfdopen
_wfreopen
_wgetdcwd
_wmktemp
_wperror
_wpgmptr
_wstati64
_wstrtime
_wsystem
_wtempnam
_wtmpnam
_wtoi64
_yn
acos
atexit
atof
ctime
ferror
fgetwc
fputs
fputws
freopen
getc
getenv
gmtime
isleadbyte
iswprint
iswxdigit
labs
printf
rand
setlocale
signal
sscanf
strchr
strtoul
swscanf
tanh
time
tmpfile
wprintf

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

472550cc76be68d4ecf24a940c5c5c87

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

msvcrt

Sections

.text Size: 177KB - Virtual size: 177KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 720B

.data2 Size: 10KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 177KB - Virtual size: 177KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 720B

.data2
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 1KB