938cdd74cb0d975029c856aef33a90453b4bb401b2c1a191a6e3a82f0bc377cf

General

Target

938cdd74cb0d975029c856aef33a90453b4bb401b2c1a191a6e3a82f0bc377cf
Size

538KB
MD5

40ed6df9c8bf066b87942f39a8ea651f
SHA1

bae72cd62174e3555193b08e669ce964d423b62e
SHA256

938cdd74cb0d975029c856aef33a90453b4bb401b2c1a191a6e3a82f0bc377cf
SHA512

dac5b58e98bab67ba667f95a947101c52da66d4fd8ab37300d2e0ff9e86d5bfe7a6f3bad2ba88536757afd1a4395466bf92df8363babf2ec190b4b11689aa1fb
SSDEEP

6144:hBjc9aVBIwZsvVsKao8y8z/SOy8M9ls+kSn7FOtHGE+cI3UEPNQoU:hBjcIVBIqsvVZaNHzmrs8BOBDKPNU

Score

N/A

Malware Config

Signatures

Files

938cdd74cb0d975029c856aef33a90453b4bb401b2c1a191a6e3a82f0bc377cf
.exe windows x86

cd4c241b48712acb56b8f7160a18b584

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
OutputDebugStringA
CheckRemoteDebuggerPresent
lstrcpyW
lstrcpyA
SwitchToThread
TerminateProcess
AssignProcessToJobObject
GetProcessHeap
CreateJobObjectW
SetUnhandledExceptionFilter
HeapAlloc
CreateProcessW
SetErrorMode
lstrlenA
SetInformationJobObject
ExitProcess

user32

GetMessageW
TranslateMessage
RegisterClassExW
ShowWindow
GetActiveWindow
CreateWindowExW
MessageBoxW
UpdateWindow
DefWindowProcW
DispatchMessageW

comctl32

ord17

powrprof

GetPwrCapabilities
GetActivePwrScheme
IsPwrHibernateAllowed

imagehlp

ImageEnumerateCertificates

winspool.drv

ord201
WritePrinter
EndDocPrinter
OpenPrinterA
ClosePrinter
StartPagePrinter
StartDocPrinterW
EndPagePrinter

Sections

CODE
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ml
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd4c241b48712acb56b8f7160a18b584

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comctl32

powrprof

imagehlp

winspool.drv

Sections

CODE Size: 339KB - Virtual size: 338KB

.rdata Size: 2KB - Virtual size: 1KB

.ml Size: 512B - Virtual size: 482B

DATA Size: 512B - Virtual size: 16KB

CODE
Size: 339KB - Virtual size: 338KB

.rdata
Size: 2KB - Virtual size: 1KB

.ml
Size: 512B - Virtual size: 482B

DATA
Size: 512B - Virtual size: 16KB