3e45e89d63f4a3f2091d7b1f5b2c331779c735cc45581b3f0d6f293e45fc45f1

Resubmissions

23/12/2022, 01:02

221223-bdrt6sag3t 10

20/11/2022, 04:47

221120-fehecabe9y 8

Sharing

Copy URL Twitter E-mail

General

Target

3e45e89d63f4a3f2091d7b1f5b2c331779c735cc45581b3f0d6f293e45fc45f1
Size

194KB
MD5

d879588b3878a138d84c21f9e6146f48
SHA1

5f64f9e6200115cdd6060d04b9a6fccd20ebcff4
SHA256

3e45e89d63f4a3f2091d7b1f5b2c331779c735cc45581b3f0d6f293e45fc45f1
SHA512

250e1f55c53793ee96c3e72edf42e9725ddbfed121d4a272c698f2e310241a540f410a19e89925a20d3edfc543663fe7977e1d3d7e2e7a5462c2b2a0da65a381
SSDEEP

3072:Uv5ChRQUknU7TfNMXgSrayXVE9y4qQDHg2EPkoTrEsjHZvQ3hl43vpMvxGWqB2cH:dh6zU7T1DylEtDAvPJTrF5vQ37IM

Score

N/A

Malware Config

Signatures

Files

3e45e89d63f4a3f2091d7b1f5b2c331779c735cc45581b3f0d6f293e45fc45f1
.exe windows x86

64c1eadffab91dbab47828ec42ef51fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW
timeGetTime

ole32

CreateStreamOnHGlobal
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoTaskMemAlloc

msimg32

GradientFill
AlphaBlend

user32

IsDialogMessageW
CreateDialogParamW
DispatchMessageW
TranslateMessage
PeekMessageW
ShowWindow

shell32

DragFinish
DragAcceptFiles
DragQueryFileW

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
CreateBitmap
CreatePen
DeleteObject
CreateRectRgn

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

kernel32

Sleep
EnterCriticalSection
GetStringTypeW
MultiByteToWideChar
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
LoadLibraryW
RtlUnwind
HeapSize
LeaveCriticalSection
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
HeapAlloc
HeapReAlloc
HeapFree
GetTickCount
CreateIoCompletionPort
CloseHandle
GetLastError
GetQueuedCompletionStatus
InterlockedIncrement
lstrlenA
IsBadStringPtrA
IsBadReadPtr
GetProcessHeap
IsBadCodePtr
GetModuleHandleA
VirtualQuery
GetSystemInfo
HeapDestroy
HeapCreate
GetCommandLineA
HeapSetInformation
IsProcessorFeaturePresent
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

64c1eadffab91dbab47828ec42ef51fa

Headers

DLL Characteristics

File Characteristics

Imports

winmm

ole32

msimg32

user32

shell32

gdi32

winspool.drv

kernel32

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 142KB - Virtual size: 141KB

.data Size: 4KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 142KB - Virtual size: 141KB

.data
Size: 4KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 3KB