80c65364fc2d0edfd623aaf22425b287d72645185aeb9aae178f1c92c63aff3c

Sharing

Copy URL Twitter E-mail

General

Target

80c65364fc2d0edfd623aaf22425b287d72645185aeb9aae178f1c92c63aff3c
Size

97KB
MD5

e4ab5596cb8fbe932670a6a5420e7ab9
SHA1

149498eeaf1054da769776a8c852fb02d9f77278
SHA256

80c65364fc2d0edfd623aaf22425b287d72645185aeb9aae178f1c92c63aff3c
SHA512

fae05cfd4c2c9172fb1baced905db7074fae65cdff38eae6d35a2af021666fe960eaec41f76318f28aedcff6e11bfa78549ad4f43c99c10fac89942ddcd46103
SSDEEP

1536:RPkP2oTrQAlPbhf4esGzqcyCOoMMdWbCLtwTTAPvWixInjVopcP+ERe:tiQA9hQEuCOoMKwCYTi5xIjGGPZR

Score

N/A

Malware Config

Signatures

Files

80c65364fc2d0edfd623aaf22425b287d72645185aeb9aae178f1c92c63aff3c
.exe windows x86

d1f43ec2b7a7a31a4c1f4393df4550fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ClearEventLogW
RegQueryValueA
AccessCheck
RegSetValueExA

kernel32

HeapSize
GetUserDefaultLangID
GlobalLock
GlobalMemoryStatus
LocalFree
VirtualUnlock
GlobalAlloc
HeapLock
DeleteCriticalSection
HeapAlloc
WritePrivateProfileSectionA
GetModuleHandleA
GetProcAddress
GetEnvironmentStrings
GetCurrentProcessId
GetExitCodeThread
GetStdHandle
ResumeThread
GetHandleInformation
FreeEnvironmentStringsA
GetModuleFileNameA
VirtualAlloc
CreateSemaphoreA
GetLastError
GetFullPathNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentDirectoryA
GetDriveTypeA
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
SetFilePointer
WriteFile
ReadFile
InitializeCriticalSection
FlushFileBuffers
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapReAlloc
SetStdHandle
CloseHandle
CreateFileA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

winspool.drv

AbortPrinter
DeletePrinterDataA
EnumPrinterDriversA
EnumJobsA
DeletePrinterConnectionA
GetJobW

netapi32

NetGetDCName
NetFileEnum

uxtheme

GetThemeBackgroundExtent

wsnmp32

ord903

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1f43ec2b7a7a31a4c1f4393df4550fe

Headers

File Characteristics

Imports

advapi32

kernel32

winspool.drv

netapi32

uxtheme

wsnmp32

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 13KB

.rsrc Size: 46KB - Virtual size: 46KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 13KB

.rsrc
Size: 46KB - Virtual size: 46KB

.reloc
Size: 4KB - Virtual size: 3KB