de95d7f55440811d7fd88eb9d1384cbaddea91d8d3f919c614698caedb1e2e3d

Sharing

Copy URL Twitter E-mail

General

Target

de95d7f55440811d7fd88eb9d1384cbaddea91d8d3f919c614698caedb1e2e3d
Size

153KB
MD5

53d502276b4bf318da3556bd39757271
SHA1

58d595f003ae7ed390cf742f97ac297ec3c5463b
SHA256

de95d7f55440811d7fd88eb9d1384cbaddea91d8d3f919c614698caedb1e2e3d
SHA512

415a5cdb65586082bc935c8939aebea9f74e2524c66b6964ad4b7c2e4ab70de373ce5017581c8ab262eba4f7375bf629d6af971f60ee491cc77c3d0f09c252a0
SSDEEP

3072:JtVAe198Et6E8xL70UqLQDhUh58XkXM0cNi:DVA698S6xLAUqchqfaN

Score

N/A

Malware Config

Signatures

Files

de95d7f55440811d7fd88eb9d1384cbaddea91d8d3f919c614698caedb1e2e3d
.exe windows x86

e5f2a561cfb24611dbcb5be8a6206409

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GetStartupInfoW
SetSystemPowerState
FormatMessageW
GetCPInfo
CreateEventW
FileTimeToSystemTime
LoadLibraryW
ExitProcess
WideCharToMultiByte
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
WriteConsoleW
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapAlloc
LoadLibraryA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCurrentThreadId
GetModuleHandleA
GetVersionExA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW

user32

FindWindowW
FindWindowExW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

shlwapi

StrCmpNW
wnsprintfW
PathFindExtensionW
StrDupW
PathIsUNCW
UrlGetPartW

ws2_32

setsockopt
getservbyname
getprotobynumber
socket

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5f2a561cfb24611dbcb5be8a6206409

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

winspool.drv

shlwapi

ws2_32

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 92KB - Virtual size: 89KB

.data Size: 8KB - Virtual size: 163KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 92KB - Virtual size: 89KB

.data
Size: 8KB - Virtual size: 163KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 5KB - Virtual size: 5KB