04f650fad951461495e33dd4b33e22dcc370dc9fc91bad2ac237c0d8fa861c51

Sharing

Copy URL Twitter E-mail

General

Target

04f650fad951461495e33dd4b33e22dcc370dc9fc91bad2ac237c0d8fa861c51
Size

669KB
MD5

6b467de86aab776d9ed4bb7ac29f6430
SHA1

d8a1b0a13a4c56522008370fc4bd47a45b4616bb
SHA256

04f650fad951461495e33dd4b33e22dcc370dc9fc91bad2ac237c0d8fa861c51
SHA512

a0a9ede7d8f0dab3185cc60be21cfba98c7cf2e5a24a4b8b44e145a0fd637ddac891592f87df3cfa43d4e58affa4e47093b80e35c93a9375dd6b7e97658b0c35
SSDEEP

12288:dxuj/5kQANn9MUHPVLoNjY+6z0AB0BZqBuA903FL+e66Q2qT:do75kQArMyPVLAQPWO8bFKI

Score

N/A

Malware Config

Signatures

Files

04f650fad951461495e33dd4b33e22dcc370dc9fc91bad2ac237c0d8fa861c51
.exe windows x86

ccea3d96ef90697aefbd6d2712e875b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualAlloc
GetCommandLineW
SetFileAttributesW
GetProfileSectionW
GetCurrentProcessId
AreFileApisANSI
SwitchToFiber
PeekConsoleInputA
ChangeTimerQueueTimer
RemoveDirectoryA
GetTimeFormatW
FindResourceW
GetCurrentThreadId
CreateFileMappingA
LocalUnlock
EnumCalendarInfoW
IsDebuggerPresent
GetOEMCP
ReadFileEx
ReplaceFileA
GlobalMemoryStatusEx
WriteTapemark
VirtualQueryEx
LocalSize
BindIoCompletionCallback
SetDefaultCommConfigW

winspool.drv

ClosePrinter
GetFormW
EndPagePrinter
EnumFormsA
GetPrinterW
GetPrinterDriverDirectoryW
DeletePrinterDataW
GetPrintProcessorDirectoryA
GetPrinterDataW
EnumMonitorsW
GetPrinterDataExW
WritePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

OpenTraceW
GetTraceEnableLevel
RegEnumKeyW
AddAccessAllowedAce
ControlTraceW
BuildSecurityDescriptorW
CryptHashData
GetSidIdentifierAuthority
InitializeSecurityDescriptor
RegisterServiceCtrlHandlerW
EnumDependentServicesW
AllocateLocallyUniqueId
AreAllAccessesGranted
RegEnumKeyExW
SetEntriesInAclA
ConvertStringSecurityDescriptorToSecurityDescriptorW
LsaICLookupNames

comctl32

_TrackMouseEvent
ImageList_Add
ImageList_ReplaceIcon
InitCommonControls
InitCommonControlsEx
ImageList_GetImageCount
ImageList_GetBkColor
CreateStatusWindowW
ImageList_Read
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_DragLeave

msvcrt

?set_terminate@@YAP6AXXZP6AXXZ@Z
exit
_mbsupr
abort
isupper
_setmode
_strdate
_ismbblead
_stat
frexp
ungetwc
_localtime64
_cabs
fclose
_lseek
_strdup
atoi
wcstoul
_snprintf
strcspn
_close
wprintf
??1bad_cast@@UAE@XZ
_isctype
_ultow
_mktemp
_mbsdec
??8type_info@@QBEHABV0@@Z
fflush
_memicmp
_open
memcpy
_winmajor
__lconv_init
_strcmpi
fseek
strcat
feof

crypt32

CryptUninstallDefaultContext

mscms

InternalGetPS2ColorRenderingDictionary
DeleteColorTransform
InternalGetPS2CSAFromLCS
InternalGetPS2ColorSpaceArray
OpenColorProfileA
TranslateBitmapBits
IsColorProfileValid
InstallColorProfileW
GetColorDirectoryA
GetColorProfileHeader
EnumColorProfilesA
OpenColorProfileW
CreateColorTransformW
InternalGetPS2PreviewCRD

Sections

BSS
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

TEXT
Size: 11KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 593KB - Virtual size: 930KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccea3d96ef90697aefbd6d2712e875b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

advapi32

comctl32

msvcrt

crypt32

mscms

Sections

BSS Size: 15KB - Virtual size: 14KB

BSS Size: 8KB - Virtual size: 7KB

TEXT Size: 11KB - Virtual size: 348KB

.idata Size: 593KB - Virtual size: 930KB

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 1024B - Virtual size: 258B

BSS
Size: 15KB - Virtual size: 14KB

BSS
Size: 8KB - Virtual size: 7KB

TEXT
Size: 11KB - Virtual size: 348KB

.idata
Size: 593KB - Virtual size: 930KB

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 1024B - Virtual size: 258B