b367502cdf5797011daf9039ac26d7c9354126abc9124fa46c10c912ce41a256

Sharing

Copy URL Twitter E-mail

General

Target

b367502cdf5797011daf9039ac26d7c9354126abc9124fa46c10c912ce41a256
Size

275KB
MD5

f6330aa06528fc9998537af68f0918c7
SHA1

0598649984fdab9a5483d806c25cca85f8904075
SHA256

b367502cdf5797011daf9039ac26d7c9354126abc9124fa46c10c912ce41a256
SHA512

1b3e9b2f69a83ae4905b8eb8adc6511c2908eab6c4179a78474ad68f7ea10e90f65b6abb7c6d54c7cfc4ca457b967e2f7a0bb11c87fe12423b57ab847ecf441c
SSDEEP

6144:HmJVNld3aG+aTnKaDDPjjtBsTsWmO7Y6gfKQMaOFcXz7fR:EVNldKuTKOjLcsWmO7BXqR

Score

N/A

Malware Config

Signatures

Files

b367502cdf5797011daf9039ac26d7c9354126abc9124fa46c10c912ce41a256
.exe windows x86

6a299ead51e47ca1e4ac2c4b01d18439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
SetStdHandle
RtlUnwind
LoadLibraryW
LCMapStringW
CompareStringW
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetStringTypeW
HeapReAlloc
IsProcessorFeaturePresent
HeapSize
FlushFileBuffers
CloseHandle
GlobalFree
MultiByteToWideChar
GetLastError
InterlockedDecrement
IsValidCodePage
CreateFileW
GetFileAttributesW
HeapCreate
Sleep
GlobalAlloc
HeapFree
QueryPerformanceCounter
HeapAlloc
GetCurrentProcess
GetOEMCP
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId

user32

GetWindow
DestroyWindow
GetMessageA
FillRect
SetCapture
LoadMenuA
LoadIconA
GetClientRect
SendMessageA
GetDC
TranslateMessage
GetScrollInfo
MessageBoxA
CreateWindowExA
ReleaseDC
ScrollWindow
RedrawWindow
GetDesktopWindow
ShowWindow
WindowFromDC
DispatchMessageA
CloseWindow
LoadCursorA
DialogBoxParamA
SetScrollInfo
GetScrollPos
RegisterClassA

gdi32

GetEnhMetaFileW
SetPixel
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetTextMetricsA
TextOutW
GetStockObject
CreateSolidBrush
BitBlt

winspool.drv

ClosePrinter

comdlg32

PrintDlgA

advapi32

AllocateAndInitializeSid
FreeSid
LookupAccountSidA
EqualSid
GetTokenInformation

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 227KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a299ead51e47ca1e4ac2c4b01d18439

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 227KB - Virtual size: 236KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 227KB - Virtual size: 236KB

.rsrc
Size: 512B - Virtual size: 436B