9f3c69c2d753bce3206d6309836026945ac3855e7e33de0aa3f022368e213e1a

Sharing

Copy URL Twitter E-mail

General

Target

9f3c69c2d753bce3206d6309836026945ac3855e7e33de0aa3f022368e213e1a
Size

85KB
MD5

6f1185c6ff0d08c97f420ebec1b728d0
SHA1

503a9326000f62b85ec815ed0fef7a1aa999262a
SHA256

9f3c69c2d753bce3206d6309836026945ac3855e7e33de0aa3f022368e213e1a
SHA512

1d240b5a1ac5d730581d462a20ff9042bc875e6baf3ab3f72fa23fed41bdd1c4343e6ade3a7f130ee0dbdae81b70b66fa7b255309096f82c524882b16a3ebb08
SSDEEP

1536:CuMM1C9I9BiZsT0u+kLSe/OmKXoDhaaQ7vLmaAERLGGVwk2J:CuMMY2AZg5+s/vNaJSaAEItf

Score

N/A

Malware Config

Signatures

Files

9f3c69c2d753bce3206d6309836026945ac3855e7e33de0aa3f022368e213e1a
.exe windows x86

d1756b9456b7bea439219ccbd273f579

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

sprintf
RtlInitAnsiString
RtlZeroMemory
RtlFreeAnsiString
LdrGetProcedureAddress
vsprintf
memset
memcpy

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_XcptFilter
_wcmdln
exit
_exit

kernel32

GetStartupInfoW
GetModuleHandleW
CreateThread
OutputDebugStringA
GetCurrentDirectoryA
GetModuleHandleA
WritePrivateProfileStringA
GetProcAddress
GetModuleFileNameW
Beep
GetProcessHeap
OutputDebugStringW
WaitForSingleObjectEx
HeapAlloc
ExitProcess

user32

EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
LoadCursorW
DispatchMessageW
DefWindowProcW
UpdateWindow
CreateWindowExW
GetActiveWindow
ShowWindow
LoadStringW
MessageBoxA
RegisterClassExW
TranslateMessage
BeginPaint

winspool.drv

OpenPrinterA
ClosePrinter

winmm

PlaySoundW

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hqdrwff
Size: - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d1756b9456b7bea439219ccbd273f579

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

msvcrt

kernel32

user32

winspool.drv

winmm

Sections

.text Size: 82KB - Virtual size: 82KB

.data Size: 512B - Virtual size: 2.0MB

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 29KB

hqdrwff Size: - Virtual size: 80KB

.text
Size: 82KB - Virtual size: 82KB

.data
Size: 512B - Virtual size: 2.0MB

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 29KB

hqdrwff
Size: - Virtual size: 80KB