137a4268edfaf6667d1c299d7f8232a38860dd4b0a0216c64006e4245c0c15a8

Sharing

Copy URL Twitter E-mail

General

Target

137a4268edfaf6667d1c299d7f8232a38860dd4b0a0216c64006e4245c0c15a8
Size

2.8MB
MD5

4ad55ee25faa101966abd69b0b5f57f5
SHA1

927b8c97b204c5f2b9d0bc4717d202bcbe3ca410
SHA256

137a4268edfaf6667d1c299d7f8232a38860dd4b0a0216c64006e4245c0c15a8
SHA512

40393ca42bec9d45fe107f66071114062995110681a59e43d2d251f2447c5bfd9625ba33f03cf6c6f7977382288527dcf64bd260c1d0a7bf41c3f692e8fbc700
SSDEEP

49152:+Yscw3mmNJqrqO7jf7NoevEZ7RH18wBpns34Z30sTC8yNtQLMOyFYUWF9yYUWF9X:ImmiqO7jf7Nlvo7jtPs42spyN2z

Score

N/A

Malware Config

Signatures

Files

137a4268edfaf6667d1c299d7f8232a38860dd4b0a0216c64006e4245c0c15a8
.exe windows x64

d42b343da2ff3240128c19d65ddde2fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCurrentThreadId

user32

LoadStringW

gdi32

LineTo

comdlg32

GetSaveFileNameW

advapi32

RegCloseKey

shell32

SHGetPathFromIDListW

msvcp140

?id@?$ctype@_W@std@@2V0locale@2@A

shlwapi

PathFileExistsW

winhttp

WinHttpReceiveResponse

ws2_32

WSACleanup

gdiplus

GdiplusShutdown

imm32

ImmSetCompositionWindow

libxl

xlCreateXMLBookW

python37

PyImport_AppendInittab

libtcc

tcc_add_symbol

vcruntime140

__vcrt_InitializeCriticalSectionEx

api-ms-win-crt-runtime-l1-1-0

_crt_atexit

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-stdio-l1-1-0

fopen

api-ms-win-crt-string-l1-1-0

isdigit

api-ms-win-crt-time-l1-1-0

_mktime64

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-math-l1-1-0

sqrt

api-ms-win-crt-filesystem-l1-1-0

_findclose

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

Exports

Exports

PyInit_Math

Sections

.text
Size: 961KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d42b343da2ff3240128c19d65ddde2fc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

msvcp140

shlwapi

winhttp

ws2_32

gdiplus

imm32

libxl

python37

libtcc

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

iphlpapi

msvcrt

psapi

Exports

Exports

Sections

.text Size: 961KB - Virtual size: 3.5MB

.sedata Size: 1.6MB - Virtual size: 1.6MB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 183KB - Virtual size: 184KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 961KB - Virtual size: 3.5MB

.sedata
Size: 1.6MB - Virtual size: 1.6MB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 183KB - Virtual size: 184KB

.sedata
Size: 4KB - Virtual size: 4KB