dcde3cb345005a8b0f578fac4bf1072e13de12d3ecc8407119aa0693e3323d38

Sharing

Copy URL Twitter E-mail

General

Target

dcde3cb345005a8b0f578fac4bf1072e13de12d3ecc8407119aa0693e3323d38
Size

204KB
MD5

d07fabfec079ceb86a91cfed65978798
SHA1

99eac0db95b27abb366bfd47d21cadb04864f49d
SHA256

dcde3cb345005a8b0f578fac4bf1072e13de12d3ecc8407119aa0693e3323d38
SHA512

67f2380ae6161b15e53cd5ecd4d5847062f5cede71c770f3e6db5f0c27e5b8f970820414d103dbd6e902420320c3ff83e322e6914ca3c5ff5ae66aa53964203c
SSDEEP

6144:aveY2TNgrT9xrb4KgGiB7z/a9Qrtgq7Kfca:akhAT9xn4KgGiB7bS8tzu

Score

N/A

Malware Config

Signatures

Files

dcde3cb345005a8b0f578fac4bf1072e13de12d3ecc8407119aa0693e3323d38
.exe windows x86

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
RaiseException
GetDiskFreeSpaceW
GetWindowsDirectoryA
SetErrorMode
ReplaceFileA
SetComputerNameW
GetLongPathNameA
CreateDirectoryA
OpenWaitableTimerA
GetModuleHandleA
CreateMutexW
ExitProcess
CreateMailslotA
ReadDirectoryChangesW
QueryPerformanceCounter
FileTimeToDosDateTime
IsBadStringPtrA
CompareStringA
FindAtomW
GetOEMCP
GetLogicalDriveStringsA
GetShortPathNameA
OpenProcess
GetProcessHeap
GetNamedPipeInfo
GetTimeFormatW
GetAtomNameW
lstrlenW
GlobalDeleteAtom
ExpandEnvironmentStringsW
GetFileTime
GetProcAddress
OpenFile
GetDiskFreeSpaceA
SetThreadPriority
GetExpandedNameA
CreateMailslotW
EnumTimeFormatsA

user32

SetWindowLongA
CallWindowProcW
UpdateWindow
DefWindowProcW
GetKeyboardType
DrawIcon
ShowWindow
RegisterClassW
SetTimer
LoadMenuA
GetFocus
GetClassLongW
SetDlgItemTextA
SetCursor
InsertMenuW
RegisterWindowMessageW
LoadMenuW
GetMenuItemID
wsprintfA
wsprintfW
IsMenu
SendMessageW
DefFrameProcW
FrameRect
CreateDialogIndirectParamW
WaitForInputIdle
GetDC
LoadImageW
MessageBoxA

gdi32

CombineRgn
FloodFill
GetTextExtentPointW
CreatePalette
BeginPath
GetGraphicsMode
CreateICW
GetTextCharset
SetRectRgn
GetDCBrushColor

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueW
RegDeleteKeyW
RegRestoreKeyW

ws2_32

getservbyport

winspool.drv

PerfCollect
AddPrinterConnectionW
XcvDataW
AddFormA
DeleteFormW
EnumMonitorsA
DeviceCapabilities
SpoolerPrinterEvent

Sections

.jDxvQ
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bX
Size: 3KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Kk
Size: 3KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HwXr
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PGje
Size: 4KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

winspool.drv

Sections

.jDxvQ Size: 10KB - Virtual size: 10KB

.bX Size: 3KB - Virtual size: 198KB

.Kk Size: 3KB - Virtual size: 22KB

.HwXr Size: 11KB - Virtual size: 10KB

.PGje Size: 4KB - Virtual size: 188KB

.rsrc Size: 170KB - Virtual size: 169KB

.reloc Size: 1024B - Virtual size: 960B

.jDxvQ
Size: 10KB - Virtual size: 10KB

.bX
Size: 3KB - Virtual size: 198KB

.Kk
Size: 3KB - Virtual size: 22KB

.HwXr
Size: 11KB - Virtual size: 10KB

.PGje
Size: 4KB - Virtual size: 188KB

.rsrc
Size: 170KB - Virtual size: 169KB

.reloc
Size: 1024B - Virtual size: 960B