0b7205082b7281cf30174ceb48cdf5f03520d7277db56e435ed281413ab07a36

Sharing

Copy URL Twitter E-mail

General

Target

0b7205082b7281cf30174ceb48cdf5f03520d7277db56e435ed281413ab07a36
Size

84KB
MD5

aca88e9e19e56d4cbaca5aeb2a76e499
SHA1

a9d43d5ed956c27d99feb0d065c042ab3bf94dd4
SHA256

0b7205082b7281cf30174ceb48cdf5f03520d7277db56e435ed281413ab07a36
SHA512

637565f1e12539b8df67ca538226d5bcda3b22d73eda39aa89bf8cfa2449c550bbc6b191c05d34a5ba491773e6d001deb07650540aaedd9f638b50080f53d7f0
SSDEEP

1536:gMtg8Q/BiTDZQaFlhALTeulX8ygYfoDL1U9QIR7wLt0KXssWCGcdvFVLtAO:jgVJaD/lhUlX8ygYfoDu9QGKVvqO

Score

N/A

Malware Config

Signatures

Files

0b7205082b7281cf30174ceb48cdf5f03520d7277db56e435ed281413ab07a36
.exe windows x86

ea9d4bb1bde2f103054c182f8fedb6c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateStatusWindowW
ord17

kernel32

GetConsoleCP
FlushFileBuffers
CloseHandle
CreateFileW
GetProcessHeap
LCMapStringW
IsWow64Process
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
VirtualAlloc
GetTickCount
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
CreateProcessW
FindFirstFileExW
FindClose
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetStdHandle
ReadFile
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
RtlUnwind
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetExitCodeProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
GetLastError
GetCommandLineW
WriteConsoleW
HeapSize
SetEndOfFile
DecodePointer
GetModuleHandleW
FindNextFileW

winspool.drv

EnumFormsW
StartPagePrinter
EnumMonitorsA
DeviceCapabilitiesA
GetPrinterDriverDirectoryA
ConnectToPrinterDlg
ScheduleJob
GetPrinterDriverW
DevQueryPrintEx

crypt32

CryptMsgVerifyCountersignatureEncoded
CertGetIntendedKeyUsage
CryptSignCertificate
CertCompareIntegerBlob

msacm32

acmFilterTagEnumA
acmFormatTagDetailsW
acmStreamSize
acmFormatTagEnumW
acmMessage32
acmFormatDetailsW
acmFilterDetailsA

mapi32

ord135
ord34
ord179
ord193
ord151
ord54
ord173
ord10
ord53

shell32

ExtractIconEx
SHGetDataFromIDListA
CommandLineToArgvW
ShellExecuteEx

rtutils

LogErrorA
TraceVprintfExA
RouterLogEventDataA
RouterLogEventStringW
TraceDumpExA
TraceRegisterExW

user32

LoadAcceleratorsW
RegisterClipboardFormatW
CreateWindowExW
RegisterClassExW
PostMessageW
DispatchMessageW
TranslateMessage
GetSystemMetrics
LoadStringW
SetWindowRgn
GetKeyboardType
CloseClipboard
SetRect
GetClipboardFormatNameA
MessageBeep
NotifyWinEvent
SetScrollRange
GetForegroundWindow
GetInputState
SetForegroundWindow
RemovePropW
GetSubMenu
TranslateAcceleratorW
LoadMenuW
CheckMenuItem
LoadImageW
LoadIconW
DestroyMenu
UpdateWindow
GetMessageW
LoadCursorW
ShowWindow
GetParent

rtm

RtmGetNetworkCount
MgmGetNextMfe
RtmAddRoute
RtmCreateEnumerationHandle
RtmRegisterClient
RtmEnumerateGetNextRoute
MgmDeRegisterMProtocol
RtmLookupIPDestination
MgmTakeInterfaceOwnership

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ea9d4bb1bde2f103054c182f8fedb6c8

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

winspool.drv

crypt32

msacm32

mapi32

shell32

rtutils

user32

rtm

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 3KB - Virtual size: 5KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 3KB - Virtual size: 5KB