af25cb145c4e804dc5ce948735203792c051b855425cfd52981ea644c17d5220

Sharing

Copy URL Twitter E-mail

General

Target

af25cb145c4e804dc5ce948735203792c051b855425cfd52981ea644c17d5220
Size

2.6MB
MD5

7c1e4f2b99404450ac9127ed29aaa7de
SHA1

09701af25b7e216a540d4e2841697cc9e957a185
SHA256

af25cb145c4e804dc5ce948735203792c051b855425cfd52981ea644c17d5220
SHA512

a89be98b7b8ec24e7ad9c511d78c82e405c0bd63e7d75369989167375416f46abff2813900c6dc12f242c36b484c721e03c15bda37412943724bb7dc28873888
SSDEEP

49152:LAxhLm0vrRJJ0xcrwq2xop+S9/ef31bI871HMPYjH1rjIQOLkff:Mxfva/qoI41bzqQjVrfOLa

Score

N/A

Malware Config

Signatures

Files

af25cb145c4e804dc5ce948735203792c051b855425cfd52981ea644c17d5220
.zip
ٱħ/Config.cfg
ٱħ_se.exe
.exe windows x86

d09363eca84d3b378922ff156c11fe03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PeekMessageA
DestroyWindow

kernel32

WriteFile
IsBadReadPtr

ole32

CreateStreamOnHGlobal

gdiplus

GdipLoadImageFromStream

gdi32

RestoreDC
RectVisible

imm32

ImmReleaseContext

shell32

ShellExecuteA
Shell_NotifyIconA

winspool.drv

DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA

comctl32

ord17
ImageList_Destroy

shlwapi

PathFileExistsA

winmm

PlaySoundA
waveOutUnprepareHeader

ws2_32

inet_ntoa

oleaut32

SafeArrayGetElemsize

oledlg

ord8

comdlg32

GetOpenFileNameA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.7MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d09363eca84d3b378922ff156c11fe03

Headers

File Characteristics

Imports

user32

kernel32

ole32

gdiplus

gdi32

imm32

shell32

winspool.drv

advapi32

comctl32

shlwapi

winmm

ws2_32

oleaut32

oledlg

comdlg32

msvcrt

iphlpapi

psapi

Sections

.text Size: 1.7MB - Virtual size: 6.8MB

.sedata Size: 1.1MB - Virtual size: 1.1MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 1.7MB - Virtual size: 6.8MB

.sedata
Size: 1.1MB - Virtual size: 1.1MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.sedata
Size: 4KB - Virtual size: 4KB