8ec2f6e5baa9a05b876b4a5947f0835621b8a321fa3078d74c490a7be7027784

Sharing

Copy URL Twitter E-mail

General

Target

8ec2f6e5baa9a05b876b4a5947f0835621b8a321fa3078d74c490a7be7027784
Size

85KB
MD5

80473385b5e1e2fc97e1b09f5c66dcca
SHA1

46b463e8bb34ba2c3a0508eda81e1cc082c3b9cc
SHA256

8ec2f6e5baa9a05b876b4a5947f0835621b8a321fa3078d74c490a7be7027784
SHA512

48cb22f5b85f4ba2cdf028f1f3265248be3892e1a9d1a29f0ae42c51c46cc0150535173a3a5a40ff25f86c81c5f493b77244fbaf53668943062c84b6020d2593
SSDEEP

1536:duMM1C9I9BiZsT0u+kLSe/OmKXoDhaaQ7vLmaAERLGGVwk2U:duMMY2AZg5+s/vNaJSaAEItW

Score

N/A

Malware Config

Signatures

Files

8ec2f6e5baa9a05b876b4a5947f0835621b8a321fa3078d74c490a7be7027784
.exe windows x86

d1756b9456b7bea439219ccbd273f579

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

sprintf
RtlInitAnsiString
RtlZeroMemory
RtlFreeAnsiString
LdrGetProcedureAddress
vsprintf
memset
memcpy

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_XcptFilter
_wcmdln
exit
_exit

kernel32

GetStartupInfoW
GetModuleHandleW
CreateThread
OutputDebugStringA
GetCurrentDirectoryA
GetModuleHandleA
WritePrivateProfileStringA
GetProcAddress
GetModuleFileNameW
Beep
GetProcessHeap
OutputDebugStringW
WaitForSingleObjectEx
HeapAlloc
ExitProcess

user32

EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
LoadCursorW
DispatchMessageW
DefWindowProcW
UpdateWindow
CreateWindowExW
GetActiveWindow
ShowWindow
LoadStringW
MessageBoxA
RegisterClassExW
TranslateMessage
BeginPaint

winspool.drv

OpenPrinterA
ClosePrinter

winmm

PlaySoundW

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tafegag
Size: - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d1756b9456b7bea439219ccbd273f579

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

msvcrt

kernel32

user32

winspool.drv

winmm

Sections

.text Size: 82KB - Virtual size: 82KB

.data Size: 512B - Virtual size: 2.0MB

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 29KB

tafegag Size: - Virtual size: 72KB

.text
Size: 82KB - Virtual size: 82KB

.data
Size: 512B - Virtual size: 2.0MB

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 29KB

tafegag
Size: - Virtual size: 72KB