f081aff290b96a63ded62dcdec5c548b7a83a1b7df2faf2fe9bf16df435b890c

Sharing

Copy URL

Twitter E-mail

General

Target

f081aff290b96a63ded62dcdec5c548b7a83a1b7df2faf2fe9bf16df435b890c
Size

158KB
MD5

eb59d58706dc05f7a73b338b593c00ec
SHA1

7edafd519c846d391caa54347e65f0bada8ec478
SHA256

f081aff290b96a63ded62dcdec5c548b7a83a1b7df2faf2fe9bf16df435b890c
SHA512

6531cb5242fd59125b4df74381b0c85698056b7b25b8f911ff0d5e67f663945fe0a8e5e4923125a76aad75c9d40a654e197bd0d94e6a04ff7887b6f5ef9fb528
SSDEEP

3072:cSuKWO46D4PydkX4ykeaGybFjuvcZbmcy/yB8nT:3/46dkICaGyhjuLT

Score

N/A

Malware Config

Signatures

Files

f081aff290b96a63ded62dcdec5c548b7a83a1b7df2faf2fe9bf16df435b890c
.exe windows x86

65b4ccfe31ba4ee1693d1be46a6aef83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
CreateSemaphoreA
GetFullPathNameA
MultiByteToWideChar
OpenFile
LocalAlloc
GetSystemInfo
OpenSemaphoreW
SetCommMask
LoadLibraryExA
CreateWaitableTimerW
CreateMutexA
GetCompressedFileSizeW
GetCPInfoExA
SetLastError
LocalFree
LoadLibraryA
FindResourceA
GetLocaleInfoA
GetProcessHeap
SetEndOfFile
WaitForSingleObject
GetTickCount
PulseEvent
FindResourceExA
GetCommandLineW
WaitForSingleObjectEx

comdlg32

GetOpenFileNameW
GetFileTitleW
ChooseFontW
PrintDlgW
PageSetupDlgW
CommDlgExtendedError
ChooseColorW
GetSaveFileNameW
GetSaveFileNameA

crypt32

CryptHashPublicKeyInfo
CryptProtectData
CertFindCertificateInStore
CertCloseStore
CertFreeCertificateContext
CertOpenStore

gdi32

DeleteDC
GetMetaFileA
CreateCompatibleDC
GetFontData
GetCharWidth32W
GetObjectA
RestoreDC
BeginPath
CreateDiscardableBitmap
SetTextAlign
GetPaletteEntries
ExtFloodFill
TranslateCharsetInfo
Polygon
CreateHalftonePalette
EndPage
GetTextExtentPointA
UpdateColors
DescribePixelFormat
SetBitmapBits
CreateFontA
DPtoLP

comctl32

PropertySheetA
ImageList_SetIconSize
ImageList_Remove
ImageList_GetIcon
ImageList_AddMasked
ImageList_GetIconSize
ImageList_ReplaceIcon
CreateToolbarEx
ImageList_Read
ImageList_Create
ImageList_Destroy

msvcrt

wcschr
clock
ftell
strncmp
strpbrk
wcsstr
isdigit
remove
memcpy
longjmp
memset
swscanf
time
fgets

user32

GetScrollInfo
GetScrollPos
CreateAcceleratorTableA
SetCursorPos
GetMenu
GetUserObjectInformationW
InflateRect
CharLowerW
DrawFocusRect
GetUpdateRect
DialogBoxParamW
SetMenuItemBitmaps
GetKeyState
SetCursor
GetWindowLongA
CreatePopupMenu
RemoveMenu
GetMenuItemCount
GetUpdateRgn
GetPropW
ModifyMenuA
ShowWindowAsync
SetTimer
RedrawWindow
InsertMenuW
InSendMessage
LoadStringW

winspool.drv

DeviceCapabilitiesA

Exports

Exports

_WHCc_chycn_d@8
_Login_User_ToSystem@8
_Terminate_User_Threads@12
_AuRs_qspe_eoum@8
_PuLb_aveZ_Vw@8

Sections

.code
Size: 512B - Virtual size: 259KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65b4ccfe31ba4ee1693d1be46a6aef83

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

crypt32

gdi32

comctl32

msvcrt

user32

winspool.drv

Exports

Exports

Sections

.code Size: 512B - Virtual size: 259KB

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 7KB - Virtual size: 7KB

.rsrc Size: 120KB - Virtual size: 120KB

.reloc Size: 1024B - Virtual size: 714B

.code
Size: 512B - Virtual size: 259KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 120KB - Virtual size: 120KB

.reloc
Size: 1024B - Virtual size: 714B