5c1ec34f169bbc61aa7743cca54ac681284fa7b9687badc10775376b17eb8da8

Sharing

Copy URL Twitter E-mail

General

Target

5c1ec34f169bbc61aa7743cca54ac681284fa7b9687badc10775376b17eb8da8
Size

316KB
MD5

6db3de16c4889b11421293b1ad9577a5
SHA1

e3d316b731dafc1e6b0d044b8af468d83ba25878
SHA256

5c1ec34f169bbc61aa7743cca54ac681284fa7b9687badc10775376b17eb8da8
SHA512

80da92c88a646ef3e423a8b51dff183a461951cc54aa3087cf94f7bf05a8bd240369ee2e7936e68c0d85871d6512324594227bf4cb7b5e4e8b4fac686e6bce2e
SSDEEP

6144:22phGzxz4dTFolYG8COGDSQ4W8yxdkPYP4Uj24N:7hGzxMKGG8C5+QIEdkPYA4N

Score

N/A

Malware Config

Signatures

Files

5c1ec34f169bbc61aa7743cca54ac681284fa7b9687badc10775376b17eb8da8
.exe windows x86

51b96f5c89bb1450565bd3970084a666

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cblrtss

_mFfindp
_mFgAE
_mFgF805
_mFgprogcheckexit
_mFgtypecheck
_mFgprogchain
_mFerr2
_mFgF800
_mFgprogunlock
mF_eloc
CBL_EXIT_PROC
CBL_GET_OS_INFO
ord1155
ord1250
_mFgF813
_mFgF811
_mFiD791
CBL_TOUPPER
CBL_ALLOC_MEM
CBL_FREE_MEM
CBL_CANCEL
ord1015
_mFiD7A1
CBL_FILENAME_CONVERT
CBL_SPLIT_FILENAME
CBL_JOIN_FILENAME
CBL_CHECK_FILE_EXIST
_mFiD7B0
ord1701
ord1021
CBL_CMPNLS
ord1311
_mFgprogunchain
CBL_MBCS_CHAR_LEN
ord1475
cob_COYIELD
CBL_NLS_GET_MSG
ord1001
ord1463
ord1573
ord1267
ord1579
ord1578
_mFgproglock
CBL_OPEN_FILE
CBL_CREATE_FILE
CBL_DELETE_FILE
CBL_RENAME_FILE
CBL_COPY_FILE
CBL_CLOSE_FILE
CBL_LCKFILE
CBL_UNLFILE
CBL_UNLOCK
CBL_FLUSH_FILE
CBL_SET_SEMAPHORE
CBL_FREE_SEMAPHORE
CBL_TEST_LOCK
CBL_GET_LOCK
CBL_FREE_LOCK
CBL_READ_FILE
CBL_WRITE_FILE
CBL_OPEN_VFILE
CBL_CLOSE_VFILE
CBL_READ_VFILE
CBL_WRITE_VFILE
CBL_FN_UPPER0CASE
CBL_LOCATE_FILE
_mFginitdat_dll
ord969
ord733
ord968
ord2038
ord2006
_mFgmain2
EXTFH
_mFgWinMain2
ord1312
ord1302
ord1471
ord1333
ord1545
ord1145
ord1464
ord1389
ord1468
_mFgF802
_mFgF801
_mFgF806
ord1313
ord1499
ord1006
ord1303
CBL_FN_CURRENT0DATE
ord1574
ord1461
ord1294

cblprnt

PC_PRINTER_WRITE
PC_PRINTER_WRITE_BMP
PC_PRINTER_LOAD_BMP
PC_PRINTER_CLOSE
PC_PRINTER_CONTROL
PC_PRINTER_OPEN
PC_PRINTER_DEFAULT_PROPERTIES
PC_PRINTER_DEFAULT_FONT
PC_PRINTER_DEFAULT_NAME
PC_PRINTER_SET_FONT
PC_PRINTER_GET_FONT
PC_PRINTER_INFO

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
GetCommandLineA
GetStartupInfoA

Exports

Exports

_mFdllinfo

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

51b96f5c89bb1450565bd3970084a666

Headers

File Characteristics

Imports

cblrtss

cblprnt

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 300KB - Virtual size: 299KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 9.1MB

.text
Size: 300KB - Virtual size: 299KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 9.1MB