a9da245159d9910100c1610d11d0aad4346862d2966504c9c609496476286249

Sharing

Copy URL Twitter E-mail

General

Target

a9da245159d9910100c1610d11d0aad4346862d2966504c9c609496476286249
Size

564KB
MD5

1538018bae2aa9bb425d92749e10428d
SHA1

8b317a99320111cd6fa6807424a9d9775d397d1d
SHA256

a9da245159d9910100c1610d11d0aad4346862d2966504c9c609496476286249
SHA512

09b6f49ac88393a8703c2768fea1bfacd362db88dfa300831fe7134c75464978b0637bbc4d4808f2866970b2a00120fbcee8f91ec0a0b8d8ab5b74a740c75449
SSDEEP

12288:mMgE69KjEWQTHDlv94Nh0q88gzlcWkNYZ2UslFsv:mMgEOKjE5HDFKAq832pSgUsDsv

Score

N/A

Malware Config

Signatures

Files

a9da245159d9910100c1610d11d0aad4346862d2966504c9c609496476286249
.exe windows x86

1ef0eb5a5b87f0536b314e939988c8b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

urlmon

URLDownloadToFileA

shell32

SHGetPathFromIDListA

comdlg32

GetSaveFileNameA

wsock32

WSACleanup

Sections

CODE
Size: - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 554KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ef0eb5a5b87f0536b314e939988c8b8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

winspool.drv

urlmon

shell32

comdlg32

wsock32

Sections

CODE Size: - Virtual size: 580KB

DATA Size: - Virtual size: 10KB

BSS Size: - Virtual size: 5KB

.idata Size: - Virtual size: 10KB

.tls Size: - Virtual size: 20B

.rdata Size: 512B - Virtual size: 24B

.vmp0 Size: - Virtual size: 43KB

.rsrc Size: 7KB - Virtual size: 46KB

.vmp1 Size: - Virtual size: 150KB

.vmp2 Size: 554KB - Virtual size: 554KB

.reloc Size: 512B - Virtual size: 112B

CODE
Size: - Virtual size: 580KB

DATA
Size: - Virtual size: 10KB

BSS
Size: - Virtual size: 5KB

.idata
Size: - Virtual size: 10KB

.tls
Size: - Virtual size: 20B

.rdata
Size: 512B - Virtual size: 24B

.vmp0
Size: - Virtual size: 43KB

.rsrc
Size: 7KB - Virtual size: 46KB

.vmp1
Size: - Virtual size: 150KB

.vmp2
Size: 554KB - Virtual size: 554KB

.reloc
Size: 512B - Virtual size: 112B