7c756bcb96cf8317d72062f9cbfa694a0efdb98446d56e7563b9274478dcf30a

Sharing

Copy URL Twitter E-mail

General

Target

7c756bcb96cf8317d72062f9cbfa694a0efdb98446d56e7563b9274478dcf30a
Size

73KB
MD5

3b251187ee7c60b9b227a1e0c02c7303
SHA1

23823b768277164d7a208efc52a7fd4eb9968df2
SHA256

7c756bcb96cf8317d72062f9cbfa694a0efdb98446d56e7563b9274478dcf30a
SHA512

901cbda9ddb9982992c7e43d99a26a891f1a39933a03bc3e48a06ea251b8853c94208ab54a0ddb7aa15b9aa14911e3929c9512fa3ff1462eebcc7cba46ae83bf
SSDEEP

1536:e0th+n9cHOUA5g8HNGmPT4ivYr5k+9J4aSfNkmSs6a1wJd+:e0I1UAZ4iQ1k+9JTgSs6a6Jd+

Score

N/A

Malware Config

Signatures

Files

7c756bcb96cf8317d72062f9cbfa694a0efdb98446d56e7563b9274478dcf30a
.zip
label20141117_pdf.scr
.exe windows x86

03ce3e38eaa2be1b0e4f2573e2003c42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsProcessorFeaturePresent
HeapReAlloc
GetStringTypeW
LCMapStringW
MultiByteToWideChar
WriteConsoleW
SetStdHandle
HeapSize
LoadLibraryW
FlushFileBuffers
CreateFileW
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
SetCurrentDirectoryA
HeapCreate
CreateEventA
Sleep
InitializeCriticalSection
GetProcessHeap
IsValidCodePage
GetOEMCP
GetACP
HeapFree
RtlUnwind
HeapAlloc
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle

user32

UpdateWindow
SendMessageW
GetWindowLongA
SetActiveWindow
BeginPaint
GetWindowPlacement
SetWindowLongA

gdi32

GetTextMetricsA
TextOutA
EndPage
GetTextMetricsW
StartPage
CreateFontIndirectW
DeleteObject
ExtTextOutW
GetTextExtentExPointW

comdlg32

PrintDlgW
ChooseFontW
FindTextW

advapi32

CryptGetDefaultProviderA

shell32

SHGetMalloc

iphlpapi

IcmpCreateFile
IcmpCloseHandle

gdiplus

GdipFree
GdipDeleteGraphics
GdipLoadImageFromFile
GdipAlloc
GdipDisposeImage
GdipCloneImage
GdipCreateFromHWND

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03ce3e38eaa2be1b0e4f2573e2003c42

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

iphlpapi

gdiplus

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 21KB - Virtual size: 29KB

.rsrc Size: 104KB - Virtual size: 103KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 21KB - Virtual size: 29KB

.rsrc
Size: 104KB - Virtual size: 103KB