ff98384b543158b8649ecd613431ea30c6238afac6c3c33fb9fdaa5a9ad0bd17

Sharing

Copy URL Twitter E-mail

General

Target

ff98384b543158b8649ecd613431ea30c6238afac6c3c33fb9fdaa5a9ad0bd17
Size

576KB
MD5

f866f1f266017349ba4dfcc12a1c0742
SHA1

fff54058cfbe85012342e8f445ee382a979ec5b5
SHA256

ff98384b543158b8649ecd613431ea30c6238afac6c3c33fb9fdaa5a9ad0bd17
SHA512

7a1a966854a0b1c241e6e06e809b484de56ec00d77c603813ce52e2c4e2b0801f96c2bcd98dbbcd1622fdad80413a24006188932663e4c824a9c18a659e88f73
SSDEEP

12288:ur2d0+fyrh5dJB8l5kkcj1yiuD527gnS8Wpio9:k2SGWIl+dMDoknPW39

Score

N/A

Malware Config

Signatures

Files

ff98384b543158b8649ecd613431ea30c6238afac6c3c33fb9fdaa5a9ad0bd17
.exe windows x86

13c651ffe4196bc76405ef810ff0a56f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesW
GetThreadTimes
IsValidLocale
WriteConsoleOutputCharacterA
GetLocalTime
SearchPathA
FreeLibrary
GetSystemTime
GetProcAddress
GetLocaleInfoA
GetHandleInformation
LoadLibraryA
GetVersion
VirtualAlloc
GetModuleHandleA
GetStartupInfoA

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
SelectObject
GetStockObject
AddFontResourceExA
GetDCOrgEx
GetObjectA
CombineRgn
SetPixelFormat
GetWinMetaFileBits

advapi32

GetAccessPermissionsForObjectA
LsaSetInformationTrustedDomain
RegSetValueW
RegReplaceKeyA

comctl32

FlatSB_GetScrollRange
ImageList_Draw
_TrackMouseEvent
ord6
ord5
ord17
FlatSB_EnableScrollBar
UninitializeFlatSB
CreatePropertySheetPageA
ImageList_Create

opengl32

glClearDepth
glGetMapdv
glVertex4f
wglDeleteContext
glIndexs
glLightModeliv
glVertex2i
glTexEnvi
glTexCoord3f
glVertex2dv
wglMakeCurrent
wglCreateContext
glColor3ub
glColor4sv
GlmfEndGlsBlock
glGetLightfv
glTexCoord2iv
wglUseFontOutlinesW
glIsList
glTexCoord1sv
glTexParameteriv

shell32

StrRChrW
StrCmpNIW

shlwapi

PathCompactPathExW
StrDupW
PathGetCharTypeW
PathFindNextComponentW
PathAddExtensionW
UrlUnescapeA
StrIsIntlEqualA
PathRenameExtensionW
SHRegCreateUSKeyW
PathAppendA
PathMatchSpecA
SHRegQueryInfoUSKeyA
PathIsSameRootW
SHQueryValueExA
SHRegEnumUSValueW
SHIsLowMemoryMachine

winspool.drv

WaitForPrinterChange
ExtDeviceMode
SetPrinterDataExA
AdvancedDocumentPropertiesW
DocumentPropertiesA
SetPrinterDataExW
DeviceCapabilitiesW
GetPrinterDataW
SetPrinterDataA
SpoolerPrinterEvent
DeletePrinterDataExA
OpenPrinterA
DeleteFormA
AddPrinterDriverA
ord203
EnumJobsA

msvcrt

_onexit
ftell
memset
fwrite
_read
feof
fopen
_getch
__threadhandle
ldexp
fseek
fprintf
fsetpos
fwprintf
fread
sprintf
fclose
printf
fputs
ferror
strpbrk
_unlink
__iscsymf
fputc
_wfdopen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_winver

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 532KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

13c651ffe4196bc76405ef810ff0a56f

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

comctl32

opengl32

shell32

shlwapi

winspool.drv

msvcrt

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 532KB - Virtual size: 528KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 532KB - Virtual size: 528KB