c4f52fc397100f965f8bf25a04b8be4567258173c74b949ac63c4863c393eae6

Sharing

Copy URL Twitter E-mail

General

Target

c4f52fc397100f965f8bf25a04b8be4567258173c74b949ac63c4863c393eae6
Size

3.3MB
MD5

051ceba416994be5ed9104b0e0bdc714
SHA1

3aa3a346566d744c1e14d65aebb390bc38418858
SHA256

c4f52fc397100f965f8bf25a04b8be4567258173c74b949ac63c4863c393eae6
SHA512

e2faa61ab116a2747de468e81d1535fdb880e205b1e0180952cb9d8bd845fb8e1b749801a80d4767b6af4772578eaf256085e9d4ecab2b1b375ea645c9359c16
SSDEEP

49152:WyMKZdxXrMLNkpYBPYmwT8210fD56nzt73uj6Y4VAP0/LK9GLIbaaUeALKYwxy:7rD723CmwoFrwzDVA8G9GU+nZLDwxy

Score

N/A

Malware Config

Signatures

Files

c4f52fc397100f965f8bf25a04b8be4567258173c74b949ac63c4863c393eae6
.exe windows x86

7b610a2b331ffc81cf7119c9ccffe424

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SafeArrayCreate

advapi32

RegOpenKeyExW

user32

IsZoomed

kernel32

GetVersion
GetVersionExW
GetVersion
ExitProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

msimg32

AlphaBlend

gdi32

ExtTextOutW

version

GetFileVersionInfoSizeW

ole32

IsEqualGUID

comctl32

ImageList_SetOverlayImage

winspool.drv

OpenPrinterW

Sections

.text
Size: - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b610a2b331ffc81cf7119c9ccffe424

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

comctl32

winspool.drv

Sections

.text Size: - Virtual size: 695KB

.itext Size: - Virtual size: 3KB

.data Size: - Virtual size: 8KB

.bss Size: - Virtual size: 20KB

.idata Size: - Virtual size: 12KB

.didata Size: - Virtual size: 806B

.tls Size: - Virtual size: 60B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 4.3MB

.vmp1 Size: 3.0MB - Virtual size: 3.0MB

.rsrc Size: 307KB - Virtual size: 307KB

.text
Size: - Virtual size: 695KB

.itext
Size: - Virtual size: 3KB

.data
Size: - Virtual size: 8KB

.bss
Size: - Virtual size: 20KB

.idata
Size: - Virtual size: 12KB

.didata
Size: - Virtual size: 806B

.tls
Size: - Virtual size: 60B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 4.3MB

.vmp1
Size: 3.0MB - Virtual size: 3.0MB

.rsrc
Size: 307KB - Virtual size: 307KB