b8965bd7a8ba0c65b45a50e51822e6947dc899c38e91f737dc3896dbe3ab8bee

Sharing

Copy URL Twitter E-mail

General

Target

b8965bd7a8ba0c65b45a50e51822e6947dc899c38e91f737dc3896dbe3ab8bee
Size

3.3MB
MD5

587a0aa184c26a4a14f45d8a9463b750
SHA1

274761e2fd42a1cbe9a0a339574cb9ff6fc5e088
SHA256

b8965bd7a8ba0c65b45a50e51822e6947dc899c38e91f737dc3896dbe3ab8bee
SHA512

c7f35d33b81d8d6f83372d6221d7393b1edc8c1e317d4caa59ef681b16e460f249f9bbb6a0bcb0ebd7d7795b258b1340803e16a49811ae096d3022575030c599
SSDEEP

98304:mJhHOGOqPU8ou1lDgGFCwvdu5P3Sgtr6YwP10xXnZLDwxy:EVO0Pou11gACSm3teYRD

Score

N/A

Malware Config

Signatures

Files

b8965bd7a8ba0c65b45a50e51822e6947dc899c38e91f737dc3896dbe3ab8bee
.exe windows x86

600afecf9daf87053aba20e35572f049

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SafeArrayPtrOfIndex

advapi32

RegOpenKeyExW

user32

GetWindowRect

kernel32

GetVersion
GetVersionExW
GetVersion
SuspendThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

msimg32

AlphaBlend

gdi32

DeleteObject

version

GetFileVersionInfoW

ole32

OleUninitialize

comctl32

ImageList_DragShowNolock

winspool.drv

DocumentPropertiesW

Sections

.text
Size: - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

600afecf9daf87053aba20e35572f049

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

comctl32

winspool.drv

Sections

.text Size: - Virtual size: 695KB

.itext Size: - Virtual size: 3KB

.data Size: - Virtual size: 8KB

.bss Size: - Virtual size: 20KB

.idata Size: - Virtual size: 12KB

.didata Size: - Virtual size: 806B

.tls Size: - Virtual size: 60B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 4.3MB

.vmp1 Size: 3.0MB - Virtual size: 3.0MB

.rsrc Size: 307KB - Virtual size: 307KB

.text
Size: - Virtual size: 695KB

.itext
Size: - Virtual size: 3KB

.data
Size: - Virtual size: 8KB

.bss
Size: - Virtual size: 20KB

.idata
Size: - Virtual size: 12KB

.didata
Size: - Virtual size: 806B

.tls
Size: - Virtual size: 60B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 4.3MB

.vmp1
Size: 3.0MB - Virtual size: 3.0MB

.rsrc
Size: 307KB - Virtual size: 307KB