b176e992e5db08a3377d7903c3c73ec6390b12e515618838e8314b1a07e6b86a

Sharing

Copy URL Twitter E-mail

General

Target

b176e992e5db08a3377d7903c3c73ec6390b12e515618838e8314b1a07e6b86a
Size

1.1MB
MD5

8db0c64622e49489f04207519fc7ba90
SHA1

4b1c87a5502814672f05642af06e4a630b546e9b
SHA256

b176e992e5db08a3377d7903c3c73ec6390b12e515618838e8314b1a07e6b86a
SHA512

a9a27f9f4c89ec7380e3b2f82bd760286aadf11b14ae9191f3b757121d60597db07e564e939402ff80f4a3d3f93d102746547871e47cd84d8103d198677870c8
SSDEEP

24576:F/YkBHVvCojMG9KxZojBTfTpYAl9ku2SA+YW7JpgDq9JFaoOxxKYtbk2085w:FYkXj2AvpYAK9W7JCO9JULxnbkww

Score

N/A

Malware Config

Signatures

Files

b176e992e5db08a3377d7903c3c73ec6390b12e515618838e8314b1a07e6b86a
.exe windows x86

0438f6d8bf0c7a967663ac21a03dfbc4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalFileTimeToFileTime
Process32FirstW
VirtualUnlock
GetUserDefaultLCID
GetTimeFormatA
lstrcpyA
GlobalFree
_lcreat
GetCommState
GetDateFormatA
UnlockFile
SetThreadContext
ConvertDefaultLocale
ClearCommError
VirtualAlloc

gdi32

CLIPOBJ_ppoGetPath
ExtFloodFill
GdiEndDocEMF
Rectangle
CreateRectRgn
AddFontResourceExW
SelectClipRgn
Escape
AnyLinkedFonts
GetObjectType
GetDeviceCaps
GdiEndPageEMF

userenv

FreeGPOListW
RegisterGPNotification
RsopResetPolicySettingStatus
GetAppliedGPOListW
GetUserProfileDirectoryA
GetUserProfileDirectoryW
RefreshPolicy
EnterCriticalPolicySection
GetDefaultUserProfileDirectoryW
CreateEnvironmentBlock
UnloadUserProfile

oleaut32

VariantChangeTypeEx
VariantCopyInd
SysAllocStringLen
SysReAllocStringLen
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayGetLBound
VariantCopy
GetActiveObject
GetErrorInfo

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 107KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 225KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

TLSCBA
Size: 101KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 139KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 310KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 217KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0438f6d8bf0c7a967663ac21a03dfbc4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

userenv

oleaut32

Sections

CODE Size: 14KB - Virtual size: 13KB

CODE Size: 10KB - Virtual size: 9KB

DATA Size: 107KB - Virtual size: 172KB

DATA Size: 225KB - Virtual size: 264KB

TLSCBA Size: 101KB - Virtual size: 206KB

.INIT Size: 139KB - Virtual size: 195KB

.idata Size: 310KB - Virtual size: 435KB

.edata Size: 217KB - Virtual size: 306KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 90B

CODE
Size: 14KB - Virtual size: 13KB

CODE
Size: 10KB - Virtual size: 9KB

DATA
Size: 107KB - Virtual size: 172KB

DATA
Size: 225KB - Virtual size: 264KB

TLSCBA
Size: 101KB - Virtual size: 206KB

.INIT
Size: 139KB - Virtual size: 195KB

.idata
Size: 310KB - Virtual size: 435KB

.edata
Size: 217KB - Virtual size: 306KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 90B