a469f8840b1c1f50a9e8abc7079420c8e85fd086a0ab1c353042395e7af41d16

Sharing

Copy URL

Twitter E-mail

General

Target

a469f8840b1c1f50a9e8abc7079420c8e85fd086a0ab1c353042395e7af41d16
Size

10.9MB
MD5

5a9350470b069d4e97e8216e02aba734
SHA1

38cd6db46b52d52ada042f5b05c00759b2c692d7
SHA256

a469f8840b1c1f50a9e8abc7079420c8e85fd086a0ab1c353042395e7af41d16
SHA512

5671a83c21d27cc5d884ef370173e54a4b2e9d31024b933821f67a4d7044bf2397418a3885114f771b6d85a4345caf2943bcb0554b509c4c6298653f0727a0e2
SSDEEP

196608:NGROramW/YyVcxIa6xBqBrM94uqR9Fb2m/aWok2tdI1FRn2mbe3NmmXo5J:N7rNCwNaUBrs4r3Vj3onqRvbe9mm45

Score

N/A

Malware Config

Signatures

Files

a469f8840b1c1f50a9e8abc7079420c8e85fd086a0ab1c353042395e7af41d16
.exe windows x86

6f24f6e410e5adbc3234fe7cd979908c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SafeArrayPtrOfIndex

advapi32

LookupPrivilegeValueW

user32

SetCursorPos

kernel32

GetVersion
GetVersionExW
GetVersion
VirtualQuery
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

GetTextExtentPointW

version

VerQueryValueW

shfolder

SHGetFolderPathW

ole32

CoTaskMemFree

comctl32

FlatSB_GetScrollInfo

msvcrt

memcpy

shell32

Shell_NotifyIconW

winspool.drv

GetDefaultPrinterW

wsock32

connect

crypt32

CryptUnprotectData

winmm

timeBeginPeriod

Exports

Exports

TMethodImplementationIntercept

Sections

.text
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 80B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f24f6e410e5adbc3234fe7cd979908c

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

shfolder

ole32

comctl32

msvcrt

shell32

winspool.drv

wsock32

crypt32

winmm

Exports

Exports

Sections

.text Size: - Virtual size: 4.2MB

.itext Size: - Virtual size: 8KB

.data Size: - Virtual size: 65KB

.bss Size: - Virtual size: 24KB

.idata Size: - Virtual size: 15KB

.didata Size: - Virtual size: 2KB

.edata Size: - Virtual size: 89B

.tls Size: - Virtual size: 80B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 8.9MB

.vmp1 Size: 10.9MB - Virtual size: 10.9MB

.reloc Size: 512B - Virtual size: 280B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: - Virtual size: 4.2MB

.itext
Size: - Virtual size: 8KB

.data
Size: - Virtual size: 65KB

.bss
Size: - Virtual size: 24KB

.idata
Size: - Virtual size: 15KB

.didata
Size: - Virtual size: 2KB

.edata
Size: - Virtual size: 89B

.tls
Size: - Virtual size: 80B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 8.9MB

.vmp1
Size: 10.9MB - Virtual size: 10.9MB

.reloc
Size: 512B - Virtual size: 280B

.rsrc
Size: 2KB - Virtual size: 1KB