e0c1cd386b6c5f6faa64f0da9e97fd6a08bfec22a31f497c372b86d83a286caf

Sharing

Copy URL Twitter E-mail

General

Target

e0c1cd386b6c5f6faa64f0da9e97fd6a08bfec22a31f497c372b86d83a286caf
Size

154KB
MD5

12cba4a387cc9066583ce2dd3878f233
SHA1

4497f52bcd0590c22745a449d2e09bd4f4248ef7
SHA256

e0c1cd386b6c5f6faa64f0da9e97fd6a08bfec22a31f497c372b86d83a286caf
SHA512

57ecbfe6d5b0512d872728706a440411b698349dd23ebd02d954222a873583d248ccf71a3d152ee2ac891393763c546495bedf979c8eec05446f84fd0ab1ab34
SSDEEP

3072:WBmVvAA2tt+P7NKcElWTA8q/2B5bjN3cqXrIHWayS1j5m:ImVvAfto7NKcElWTNp5bjNvexyJ

Score

N/A

Malware Config

Signatures

Files

e0c1cd386b6c5f6faa64f0da9e97fd6a08bfec22a31f497c372b86d83a286caf
.exe windows x86

ebc8cc04f780f5dbe0de10de9e80ad82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
RtlUnwind
Sleep
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
FlushFileBuffers
DeleteCriticalSection
GetFileType
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
CreateEventA
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
SetFilePointer
CloseHandle
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
GetSystemInfo
LocalAlloc
LoadLibraryA
GetLocalTime
GetProcessHeaps
GetProcAddress
lstrcmpiA
GetLastError
QueryPerformanceCounter
GetTimeFormatW
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InitializeCriticalSectionAndSpinCount
GetProcessHandleCount
GetProcessHeap
SetEvent
GetDateFormatW
HeapAlloc
lstrcpynA
InterlockedDecrement
InterlockedIncrement
GetCPInfo
EncodePointer
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
ExitProcess
GetModuleHandleW
IsProcessorFeaturePresent
lstrlenA
EnterCriticalSection
HeapFree
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
WideCharToMultiByte
CreateFileW

user32

ShowWindow
LoadStringW
SetWindowPos
SendMessageW
SetClipboardData
LoadBitmapW
GetDesktopWindow
DefWindowProcA
GetDlgItem
TranslateAcceleratorA
EmptyClipboard
OpenClipboard
ReleaseCapture
LoadCursorA
LoadImageA
EnableMenuItem
ReleaseDC
GetDCEx
GetWindowTextW
GetClipboardData
EndPaint
ClientToScreen
SetWindowPlacement
SetCursor
GetWindowTextLengthW
CloseClipboard
ScreenToClient
GetWindowRect
IsMenu
InsertMenuItemA
DdeCreateStringHandleA
PostQuitMessage
LoadImageW
SetCapture
IsClipboardFormatAvailable
MessageBeep
WindowFromPoint
GetClientRect
GetUserObjectSecurity
SendMessageA
BeginPaint
DdeFreeStringHandle
GetDC
LockWindowUpdate
GetWindowPlacement
InvalidateRect

gdi32

BitBlt
PatBlt
StartPage
DeleteDC
CreateFontIndirectW
StretchBlt
CreateDCA
SetPixel
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
StartDocA
CreateBitmapIndirect
SetStretchBltMode
GetPixel
GetObjectA
EndDoc
GetTextColor
EndPage

winspool.drv

ClosePrinter
OpenPrinterA
EnumPrintersA
ord201

comdlg32

ChooseFontW

advapi32

RegQueryValueExA
RegCloseKey
RegEnumValueA
RegOpenKeyA

shell32

SHGetFolderPathW
SHGetMalloc

ole32

OleUninitialize
OleInitialize
CoGetMalloc
CoTaskMemFree

oleaut32

SysAllocStringByteLen

comctl32

ImageList_AddMasked

gdiplus

GdipCreatePen1
GdipDrawRectangleI
GdiplusStartup
GdipDrawEllipseI
GdiplusShutdown
GdipFree
GdipDeletePen
GdipCreateFromHDC2
GdipDeleteGraphics
GdipAlloc

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebc8cc04f780f5dbe0de10de9e80ad82

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

Sections

.text Size: 75KB - Virtual size: 75KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 34KB - Virtual size: 34KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 75KB - Virtual size: 75KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 34KB - Virtual size: 34KB

.reloc
Size: 7KB - Virtual size: 6KB