903009cfb537aba9839a8e1ac83d9c029bc7c233afd1706e669f7d77a298dca8

Sharing

Copy URL

Twitter E-mail

General

Target

903009cfb537aba9839a8e1ac83d9c029bc7c233afd1706e669f7d77a298dca8
Size

176KB
MD5

80962aacbf6b840224daddd5413c692c
SHA1

3fa4a2492edfe768c3bb13934c894f3e0caa67fc
SHA256

903009cfb537aba9839a8e1ac83d9c029bc7c233afd1706e669f7d77a298dca8
SHA512

ff9714d65b95f57dffb9553abec8b1266f311266a78b0000c8f268a935f9e3f5500de080c09504eb7f6bc7ef160f74d04ae5e951c0d2bde94a3685b3d3345df0
SSDEEP

3072:grrStVkEri14sCBQGCbflIRdI8WoPqxAAAUhYmRaXwFZ2cXRoqmsfRgsBZ6ZLXHU:pbmM0bti+8mRYwmpqJzi90

Score

N/A

Malware Config

Signatures

Files

903009cfb537aba9839a8e1ac83d9c029bc7c233afd1706e669f7d77a298dca8
.exe windows x86

235d1d8f8fec365ca43b62c9fa6dd21b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetVersionExW
GetLastError
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
GetEnvironmentStringsW
GetEnvironmentStrings
GetOEMCP
GetACP
SetEnvironmentVariableA
GetDriveTypeA
GetLocaleInfoW
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
SetUnhandledExceptionFilter
HeapSize
GetModuleHandleA
GetFullPathNameW
GetCurrentDirectoryA
FlushFileBuffers
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
IsBadWritePtr
VirtualAlloc
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetModuleFileNameA
SetFilePointer
GetVersionExA
CloseHandle
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
IsBadReadPtr
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadCodePtr
GetCurrentDirectoryW
LoadLibraryA
ReadFile

winspool.drv

EnumPortsW
ConfigurePortW
OpenPrinterW
ClosePrinter

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qarovxu
Size: - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

235d1d8f8fec365ca43b62c9fa6dd21b

Headers

File Characteristics

Imports

version

kernel32

winspool.drv

advapi32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 72KB - Virtual size: 100KB

qarovxu Size: - Virtual size: 72KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 72KB - Virtual size: 100KB

qarovxu
Size: - Virtual size: 72KB