1cf10a4e3e36f094f028f069d4904b5c38cbfd691818bd64569e49e6429c8715

Sharing

Copy URL Twitter E-mail

General

Target

1cf10a4e3e36f094f028f069d4904b5c38cbfd691818bd64569e49e6429c8715
Size

1.1MB
MD5

c309225cffcf0600035c22b9a48adbaa
SHA1

d8c6564ff8a1ea41a706388df795accc578ca302
SHA256

1cf10a4e3e36f094f028f069d4904b5c38cbfd691818bd64569e49e6429c8715
SHA512

fa7ed8ab1adf479878a76ca2951e60bcbf06adff2c195c90ba203a374dc67547e862bf66fb3d918d6faea91f21790c9f897af23a524ca7c7cbde2a9efc82dcc9
SSDEEP

24576:p/YkBHVvCojMG9KxZojBTfTpYAl9ku2SA+YW7JpgDq9JFaoOxxKYtbk2085w:BYkXj2AvpYAK9W7JCO9JULxnbkww

Score

N/A

Malware Config

Signatures

Files

1cf10a4e3e36f094f028f069d4904b5c38cbfd691818bd64569e49e6429c8715
.exe windows x86

0438f6d8bf0c7a967663ac21a03dfbc4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalFileTimeToFileTime
Process32FirstW
VirtualUnlock
GetUserDefaultLCID
GetTimeFormatA
lstrcpyA
GlobalFree
_lcreat
GetCommState
GetDateFormatA
UnlockFile
SetThreadContext
ConvertDefaultLocale
ClearCommError
VirtualAlloc

gdi32

CLIPOBJ_ppoGetPath
ExtFloodFill
GdiEndDocEMF
Rectangle
CreateRectRgn
AddFontResourceExW
SelectClipRgn
Escape
AnyLinkedFonts
GetObjectType
GetDeviceCaps
GdiEndPageEMF

userenv

FreeGPOListW
RegisterGPNotification
RsopResetPolicySettingStatus
GetAppliedGPOListW
GetUserProfileDirectoryA
GetUserProfileDirectoryW
RefreshPolicy
EnterCriticalPolicySection
GetDefaultUserProfileDirectoryW
CreateEnvironmentBlock
UnloadUserProfile

oleaut32

VariantChangeTypeEx
VariantCopyInd
SysAllocStringLen
SysReAllocStringLen
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayGetLBound
VariantCopy
GetActiveObject
GetErrorInfo

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 107KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 225KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

TLSCBA
Size: 101KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 139KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 310KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 217KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0438f6d8bf0c7a967663ac21a03dfbc4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

userenv

oleaut32

Sections

CODE Size: 14KB - Virtual size: 13KB

CODE Size: 10KB - Virtual size: 9KB

DATA Size: 107KB - Virtual size: 172KB

DATA Size: 225KB - Virtual size: 264KB

TLSCBA Size: 101KB - Virtual size: 206KB

.INIT Size: 139KB - Virtual size: 195KB

.idata Size: 310KB - Virtual size: 435KB

.edata Size: 217KB - Virtual size: 306KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 90B

CODE
Size: 14KB - Virtual size: 13KB

CODE
Size: 10KB - Virtual size: 9KB

DATA
Size: 107KB - Virtual size: 172KB

DATA
Size: 225KB - Virtual size: 264KB

TLSCBA
Size: 101KB - Virtual size: 206KB

.INIT
Size: 139KB - Virtual size: 195KB

.idata
Size: 310KB - Virtual size: 435KB

.edata
Size: 217KB - Virtual size: 306KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 90B