660d4e19af04bf3547e071515e3dff249aa4ea6c479b62d6d2acf7f117e3b1c4

Sharing

Copy URL Twitter E-mail

General

Target

660d4e19af04bf3547e071515e3dff249aa4ea6c479b62d6d2acf7f117e3b1c4
Size

239KB
MD5

8499f9ee8f9893a8209f5d3ca225ebd8
SHA1

2e9cdd0f2b2a0957f20fa664f0a50d5ad6b68210
SHA256

660d4e19af04bf3547e071515e3dff249aa4ea6c479b62d6d2acf7f117e3b1c4
SHA512

07ed11ebc14e7972ea820d4b3a0f07012cf6b8c5a821f5cba11fc669d2534214d702b7975d69ec815690b746f2c9dcca0e8eb034138bb1488f2ce08c79d6a8af
SSDEEP

6144:kIAG57uQTpkpWsJYu+OR7BpriXqbKg9AMJCx:kIj1FWN1+oeGg5

Score

N/A

Malware Config

Signatures

Files

660d4e19af04bf3547e071515e3dff249aa4ea6c479b62d6d2acf7f117e3b1c4
.exe windows x86

63a1cb4484bdd6a461f48b8c91c502d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
StringFromGUID2
CoUninitialize
CoInitialize

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyExW

kernel32

LeaveCriticalSection
GetCurrentThreadId
WritePrivateProfileStringW
IsDebuggerPresent
DeleteCriticalSection
GetSystemTimeAsFileTime
UnhandledExceptionFilter
EnterCriticalSection
GetPrivateProfileStringW
SetUnhandledExceptionFilter
GetPrivateProfileSectionW
GetStartupInfoW
VirtualAllocEx

user32

LoadStringW

mscms

CreateProfileFromLogColorSpaceW
UnregisterCMMW
GetStandardColorSpaceProfileA
RegisterCMMA
InternalGetPS2ColorSpaceArray
GetColorProfileFromHandle
SelectCMM
CreateDeviceLinkProfile

stclient

DllGetClassObject

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.LFXtPI
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KnGQ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gX
Size: 512B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ITK
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qmaMjr
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.OXd
Size: 512B - Virtual size: 755B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 212KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63a1cb4484bdd6a461f48b8c91c502d2

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

kernel32

user32

mscms

stclient

Sections

.text Size: 17KB - Virtual size: 17KB

.LFXtPI Size: 512B - Virtual size: 222B

.KnGQ Size: 1KB - Virtual size: 1KB

.gX Size: 512B - Virtual size: 712B

.rdata Size: 1KB - Virtual size: 1KB

.ITK Size: 2KB - Virtual size: 1KB

.qmaMjr Size: 512B - Virtual size: 254B

.OXd Size: 512B - Virtual size: 755B

.data Size: 212KB - Virtual size: 280KB

.rsrc Size: 1024B - Virtual size: 924B

.text
Size: 17KB - Virtual size: 17KB

.LFXtPI
Size: 512B - Virtual size: 222B

.KnGQ
Size: 1KB - Virtual size: 1KB

.gX
Size: 512B - Virtual size: 712B

.rdata
Size: 1KB - Virtual size: 1KB

.ITK
Size: 2KB - Virtual size: 1KB

.qmaMjr
Size: 512B - Virtual size: 254B

.OXd
Size: 512B - Virtual size: 755B

.data
Size: 212KB - Virtual size: 280KB

.rsrc
Size: 1024B - Virtual size: 924B