877c2705f8f243d2265eff4c1eaa5b5f3f84fd0eb4b8414ccd2e4b5b36e35ce9

Sharing

Copy URL Twitter E-mail

General

Target

877c2705f8f243d2265eff4c1eaa5b5f3f84fd0eb4b8414ccd2e4b5b36e35ce9
Size

393KB
MD5

afacfcc518b2abfe6324bf4d76e61148
SHA1

4af9449d8a6af4b4d949533dcd63d97791b7cc87
SHA256

877c2705f8f243d2265eff4c1eaa5b5f3f84fd0eb4b8414ccd2e4b5b36e35ce9
SHA512

d88b1f8fdac790052c034d76001124ad12f0e984a00688fbc19719e291ab5a2e0eb26b5eea07a17db5f920dfabdeb33d9e7f9e9dc10c75fc716553dea9cff317
SSDEEP

12288:XYCfGkM8bQrN8Bx/EpNJoM4R68vaRScno1th:ohkM8bAKxcrJgluo1th

Score

N/A

Malware Config

Signatures

Files

877c2705f8f243d2265eff4c1eaa5b5f3f84fd0eb4b8414ccd2e4b5b36e35ce9
.exe windows x86

d7c88f4ac20c9e75fb4460413aa08fca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateThread
CompareStringW
CreateFileW
WriteConsoleW
HeapSize
FlushFileBuffers
HeapReAlloc
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetVersionExA
CreateSemaphoreA
LoadLibraryW
WaitForSingleObject
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetTimeZoneInformation
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
OutputDebugStringA
WaitForMultipleObjects
LoadLibraryA
GetProcAddress
GetLastError
GetStringTypeW
ReleaseSemaphore
EnterCriticalSection
GetModuleFileNameW
EnumSystemCodePagesA
HeapCreate
LCMapStringW
Sleep
GetStdHandle
WriteFile
IsProcessorFeaturePresent
GetCurrentThreadId
SetLastError
GetCurrentProcess
HeapAlloc
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
SetEnvironmentVariableA
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
GetTimeFormatA
GetDateFormatA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess

user32

LoadCursorA
UpdateWindow
PostMessageA
AppendMenuA
DialogBoxParamA
EnableWindow
GetActiveWindow
ShowWindow
GetSysColor
GetSystemMenu
SetForegroundWindow
LoadStringA
GetParent
LoadIconA
GetAncestor
GetWindowLongA
GetWindowTextW
CreateWindowExA
ReleaseDC
SetClassLongA
EndDialog
SendDlgItemMessageW

winspool.drv

ClosePrinter

gdiplus

GdipCreatePen1
GdipDrawLineI
GdipFree
GdipDeletePen
GdipDeleteGraphics
GdipDrawImageRectI
GdipLoadImageFromFile
GdipDisposeImage
GdipCreateFromHDC
GdipCloneImage
GdipAlloc

opengl32

glClear
glBegin
glVertex3f
glEnd
glNormal3f

Sections

.text
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7c88f4ac20c9e75fb4460413aa08fca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

winspool.drv

gdiplus

opengl32

Sections

.text Size: 299KB - Virtual size: 299KB

.rdata Size: 74KB - Virtual size: 74KB

.data Size: 6KB - Virtual size: 21KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 299KB - Virtual size: 299KB

.rdata
Size: 74KB - Virtual size: 74KB

.data
Size: 6KB - Virtual size: 21KB

.rsrc
Size: 11KB - Virtual size: 11KB