ad6a1bdba3397c6386f7c65c6c5e5a4a7e088564b41434824657b49b30c431b1

Sharing

Copy URL Twitter E-mail

General

Target

ad6a1bdba3397c6386f7c65c6c5e5a4a7e088564b41434824657b49b30c431b1
Size

132KB
MD5

b7946dbfb9913c17fb23cc858822f001
SHA1

4e09613e415ef9650d512aa9b8bf26084b94f666
SHA256

ad6a1bdba3397c6386f7c65c6c5e5a4a7e088564b41434824657b49b30c431b1
SHA512

f08f8b584f2da97c60f7bd67d1799bf66aea53dfdd53b1f3f904becf8fd00a51289137a892b02ccbc1bde1e1746fd5392c3e6b3da5be88ab3a3cf3b500829fcb
SSDEEP

1536:UqSPME4LPcEQhSKaX1gSKQQmze4kQ3wSHJV4ikGVybqGpXLD7gvJ33O5G0c7r:6PME4Lk/hSXxV5kQgoJV4wVybh7gBHF

Score

N/A

Malware Config

Signatures

Files

ad6a1bdba3397c6386f7c65c6c5e5a4a7e088564b41434824657b49b30c431b1
.exe windows x86

bdc82c9d7bf4b45c0600f380d6afa189

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatW
GetModuleHandleW
GetVersionExW
OpenProcess
GetSystemTime
GetVolumeInformationW
QueryPerformanceCounter
ReleaseMutex
CreateMutexW
FindResourceW
GetProcessHeap
GetLocalTime
GetStartupInfoW
lstrcmpW
WriteConsoleW
TlsAlloc
FindFirstFileW
FindNextFileW
FindClose
OpenMutexW
DeleteFileW
FindFirstChangeNotificationW
ResetEvent
GetEnvironmentVariableW
GetExitCodeProcess
GetCurrentThread
PeekNamedPipe
DuplicateHandle
CreateFileW

user32

CheckRadioButton
SendDlgItemMessageW
IsClipboardFormatAvailable
DestroyWindow
SetClipboardData
GetIconInfo
SetWindowTextW
IsDialogMessageW
SetForegroundWindow
SendMessageW
CheckDlgButton
LoadBitmapW

gdi32

SetAbortProc
AbortDoc
SetRectRgn
CombineRgn
EndDoc
GetTextMetricsW
SetBkMode
MoveToEx
LineTo
ExcludeClipRect

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

DeleteService
ControlService
CreateServiceW
GetTokenInformation
LookupPrivilegeValueW
AdjustTokenPrivileges
SetServiceStatus
SetSecurityDescriptorDacl
SetEntriesInAclW
RegisterServiceCtrlHandlerW
RegSetValueExW
RegEnumKeyW
InitializeSecurityDescriptor
StartServiceCtrlDispatcherW
OpenProcessToken
FreeSid
AllocateAndInitializeSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CloseServiceHandle

ole32

CLSIDFromString
CoInitialize
OleInitialize
OleSetContainedObject
CoCreateInstance

ws2_32

getprotobynumber
setsockopt
socket
WSAConnect
WSACreateEvent
WSASocketW
getservbyname

version

GetFileVersionInfoW

msvcrt

_wcsicmp
_wcmdln
_XcptFilter
_exit
exit
strlen
atol
memmove
time
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_ltoa
_onexit
__dllonexit
_controlfp
__wgetmainargs

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdc82c9d7bf4b45c0600f380d6afa189

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

ws2_32

version

msvcrt

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 60KB - Virtual size: 493KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 60KB - Virtual size: 493KB

.reloc
Size: 4KB - Virtual size: 4KB