8c13fe4c9734abdff25e3c4361da0cd4c905e4391ef374f207bb7734bf13a67d

General

Target

8c13fe4c9734abdff25e3c4361da0cd4c905e4391ef374f207bb7734bf13a67d
Size

112KB
MD5

92fddbe9fc6e19d3886cd6ad809df8ae
SHA1

af93cc138995b37053a6f8aacf66add2fb188c8d
SHA256

8c13fe4c9734abdff25e3c4361da0cd4c905e4391ef374f207bb7734bf13a67d
SHA512

2b507d9ef837a7630f4b0eae96a001fb9dfba355581dcbddc7926b5cf57593c9d80caf72eeea81aa7e48514bf9fa94fd56283a1a02f2762b8bd2a329a0f101cb
SSDEEP

1536:TcIykQcvpcbwWjQUlPqi3TNparAkT4NyEWhdUK0THUbxM6jW7:MbcRx+5qmR8AkAyE2NCHUv0

Score

N/A

Malware Config

Signatures

Files

8c13fe4c9734abdff25e3c4361da0cd4c905e4391ef374f207bb7734bf13a67d
.exe windows x86

9e394da04f17ecfe84fc26c2caec839b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

usp10

ScriptXtoCP
ScriptStringAnalyse
ScriptGetFontProperties
ScriptFreeCache
ScriptApplyDigitSubstitution
ScriptStringCPtoX

winfax

FaxGetLoggingCategoriesA
FaxGetPageData
FaxGetPortA
FaxGetRoutingInfoA
FaxInitializeEventQueue
FaxEnumRoutingMethodsA
FaxSendDocumentForBroadcastA
FaxSendDocumentA
FaxSetConfigurationA
FaxSetGlobalRoutingInfoA
FaxSetJobA
FaxEnumPortsA
FaxEnumJobsA
FaxEnumGlobalRoutingInfoA
FaxEnableRoutingMethodA
FaxConnectFaxServerA
FaxRegisterServiceProviderW

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
strrchr
fclose
fwrite
fopen
exit
free
realloc
malloc

kernel32

GetStartupInfoA
GetModuleHandleA
GetSystemWindowsDirectoryA
lstrlenA
GetProfileStringW
GetVersion
FileTimeToLocalFileTime
CreateEventA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e394da04f17ecfe84fc26c2caec839b

Headers

File Characteristics

Imports

usp10

winfax

msvcrt

kernel32

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 52KB - Virtual size: 489KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 52KB - Virtual size: 489KB

.reloc
Size: 4KB - Virtual size: 3KB