b1771229fcafa20ae750cef3bbdda0fc1665f196d05e87d413eb29d90808478a

Sharing

Copy URL Twitter E-mail

General

Target

b1771229fcafa20ae750cef3bbdda0fc1665f196d05e87d413eb29d90808478a
Size

440KB
MD5

41132a340cad097d9c5d2904133ae38d
SHA1

cf69cbd0c9d3349a31683f8db56de7bf73a2acd3
SHA256

b1771229fcafa20ae750cef3bbdda0fc1665f196d05e87d413eb29d90808478a
SHA512

0402305f764e82c43b37cac5a4ee815fab24efb7bfe0bc03bedde610c7f1c8e8fcf90edce990ef9eacb532432b4f684cd2950d6bb84c35e24dd1e059a39e719e
SSDEEP

12288:CoyygWHO/XRmBVCI9tx6xhq/b/jyQla/zbS:2yRHOfRAVExU/bC3

Score

N/A

Malware Config

Signatures

Files

b1771229fcafa20ae750cef3bbdda0fc1665f196d05e87d413eb29d90808478a
.exe windows x86

586ed09a6cec7d82138b85f063fa925f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PageSetupDlgW
FindTextW
PrintDlgExW
ChooseFontW
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
CommDlgExtendedError
GetSaveFileNameW

winspool.drv

GetPrinterDriverW
ClosePrinter
OpenPrinterW

msvcrt

_XcptFilter
_exit
_c_exit
time
localtime
_cexit
iswctype
_except_handler3
_wtol
wcsncmp
_snwprintf
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
wcsncpy

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocalTime
GetUserDefaultLCID
GetDateFormatW

gdi32

EndPage
AbortDoc
EndDoc
DeleteDC
StartPage
GetTextExtentPoint32W
CreateDCW
SetAbortProc
GetTextFaceW
TextOutW
StartDocW
EnumFontsW
GetStockObject
GetObjectW
GetDeviceCaps
CreateFontIndirectW
DeleteObject

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.deah
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oaeh
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.daub
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.maub
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.maug
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mauh
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mauH
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

586ed09a6cec7d82138b85f063fa925f

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

winspool.drv

msvcrt

kernel32

gdi32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 4KB

.deah Size: 408KB - Virtual size: 408KB

.oaeh Size: 1024B - Virtual size: 4KB

.daub Size: 1024B - Virtual size: 4KB

.maub Size: 1024B - Virtual size: 4KB

.maug Size: 1024B - Virtual size: 4KB

.mauh Size: 1024B - Virtual size: 4KB

.mauH Size: 1024B - Virtual size: 4KB

.rsrc Size: 12KB - Virtual size: 28KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 4KB

.deah
Size: 408KB - Virtual size: 408KB

.oaeh
Size: 1024B - Virtual size: 4KB

.daub
Size: 1024B - Virtual size: 4KB

.maub
Size: 1024B - Virtual size: 4KB

.maug
Size: 1024B - Virtual size: 4KB

.mauh
Size: 1024B - Virtual size: 4KB

.mauH
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 12KB - Virtual size: 28KB