c9b3da0e1b1c68e1332886af250c1b50b70a4f1301ff4058420f96d9f9c5dbf9

Sharing

Copy URL

Twitter E-mail

General

Target

c9b3da0e1b1c68e1332886af250c1b50b70a4f1301ff4058420f96d9f9c5dbf9
Size

83KB
MD5

0f4f35e06e1862be2d866c25fda02a19
SHA1

bed3a637af842be6d2b373c156337c5ccfa7085a
SHA256

c9b3da0e1b1c68e1332886af250c1b50b70a4f1301ff4058420f96d9f9c5dbf9
SHA512

656899de1706d9acf187cd43be22bb06abde9dcd5796e6c9927c65288d188af4204378f89b22b640f94fb6ee483d54b84d9b182cadb831ae06174a3ad1228cc3
SSDEEP

1536:oifWmvVNfaTJb8P9ywTJGs/MhnslJbg/YBsy4gFBfPltgut:JfL7aTJALws/ltPmtoftz

Score

N/A

Malware Config

Signatures

Files

c9b3da0e1b1c68e1332886af250c1b50b70a4f1301ff4058420f96d9f9c5dbf9
.zip
Payment.Pdf_____________________________________________________________.exe
.exe windows x86

0e4e2d99b7a0f691a6fcfacb94fc2e99

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

LocalAlloc
LocalFree
lstrcpyA
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
Sleep
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetLastError
GetStdHandle
IsValidCodePage
HeapCreate
WriteFile
ExitProcess
GetProcAddress
InterlockedDecrement
GetCurrentThreadId
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
HeapAlloc
AllocConsole
GetNativeSystemInfo
TlsAlloc
RtlUnwind
lstrcmpA
EncodePointer
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
TerminateProcess
GetCurrentProcess

user32

GetMenu
GetWindow
CopyRect
CharToOemA
CheckMenuItem
EnumDisplayMonitors
GetClassNameA
GetSystemMenu
GetWindowRect
IsMenu
InsertMenuItemA
IsIconic
GetSubMenu
LoadStringA
LoadCursorA
CharUpperA
EnumDisplaySettingsA
GetClientRect
GetMenuCheckMarkDimensions
GetMonitorInfoA
GetParent
RegisterClassExW
OemToCharA
MessageBoxA
GetWindowLongA
CreateWindowExA
GetMenuState
GetDesktopWindow
GetSysColor
SetWindowPos
IsDlgButtonChecked
CreateDialogParamW
CreateWindowExW
GetSystemMetrics
IsWindowVisible
MapWindowPoints

gdi32

SetBkColor
SelectObject
SetTextColor

shell32

SHParseDisplayName
SHBrowseForFolderA
SHGetPathFromIDListA

ole32

CoTaskMemFree
CoInitialize
StgCreateDocfile
OleInitialize
CoGetMalloc

avifil32

AVIFileInit
AVIFileOpenA

shlwapi

StrPBrkA

comctl32

InitCommonControlsEx

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e4e2d99b7a0f691a6fcfacb94fc2e99

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

avifil32

shlwapi

comctl32

setupapi

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 22KB - Virtual size: 25KB

.rsrc Size: 115KB - Virtual size: 115KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 22KB - Virtual size: 25KB

.rsrc
Size: 115KB - Virtual size: 115KB