975bb421fcea2cdee61cbf1a0563bd5980884d73b4c367521931c80c4cb975ce

Sharing

Copy URL Twitter E-mail

General

Target

975bb421fcea2cdee61cbf1a0563bd5980884d73b4c367521931c80c4cb975ce
Size

84KB
MD5

127dd73ebb6d41c07ae739a862092fec
SHA1

4b6686b8bc41286081de73d3b36decb2797b1e68
SHA256

975bb421fcea2cdee61cbf1a0563bd5980884d73b4c367521931c80c4cb975ce
SHA512

f906f0ece393f85a4463c8dbaed79f052322d0a3e9862f6ef84c6f301788c62baf5f4fa322d92e3549d3d44c10852b2f34551e33573f05bd34846a684cb052e1
SSDEEP

1536:ZMtg8Q/BiTDZQaFlhALTeulX8ygYfoDL1U9QIR7wLt0KXssWCGcdvF8LtAO:6gVJaD/lhUlX8ygYfoDu9QGKVvpO

Score

N/A

Malware Config

Signatures

Files

975bb421fcea2cdee61cbf1a0563bd5980884d73b4c367521931c80c4cb975ce
.exe windows x86

ea9d4bb1bde2f103054c182f8fedb6c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateStatusWindowW
ord17

kernel32

GetConsoleCP
FlushFileBuffers
CloseHandle
CreateFileW
GetProcessHeap
LCMapStringW
IsWow64Process
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
VirtualAlloc
GetTickCount
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
CreateProcessW
FindFirstFileExW
FindClose
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetStdHandle
ReadFile
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
RtlUnwind
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetExitCodeProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
GetLastError
GetCommandLineW
WriteConsoleW
HeapSize
SetEndOfFile
DecodePointer
GetModuleHandleW
FindNextFileW

winspool.drv

EnumFormsW
StartPagePrinter
EnumMonitorsA
DeviceCapabilitiesA
GetPrinterDriverDirectoryA
ConnectToPrinterDlg
ScheduleJob
GetPrinterDriverW
DevQueryPrintEx

crypt32

CryptMsgVerifyCountersignatureEncoded
CertGetIntendedKeyUsage
CryptSignCertificate
CertCompareIntegerBlob

msacm32

acmFilterTagEnumA
acmFormatTagDetailsW
acmStreamSize
acmFormatTagEnumW
acmMessage32
acmFormatDetailsW
acmFilterDetailsA

mapi32

ord135
ord34
ord179
ord193
ord151
ord54
ord173
ord10
ord53

shell32

ExtractIconEx
SHGetDataFromIDListA
CommandLineToArgvW
ShellExecuteEx

rtutils

LogErrorA
TraceVprintfExA
RouterLogEventDataA
RouterLogEventStringW
TraceDumpExA
TraceRegisterExW

user32

LoadAcceleratorsW
RegisterClipboardFormatW
CreateWindowExW
RegisterClassExW
PostMessageW
DispatchMessageW
TranslateMessage
GetSystemMetrics
LoadStringW
SetWindowRgn
GetKeyboardType
CloseClipboard
SetRect
GetClipboardFormatNameA
MessageBeep
NotifyWinEvent
SetScrollRange
GetForegroundWindow
GetInputState
SetForegroundWindow
RemovePropW
GetSubMenu
TranslateAcceleratorW
LoadMenuW
CheckMenuItem
LoadImageW
LoadIconW
DestroyMenu
UpdateWindow
GetMessageW
LoadCursorW
ShowWindow
GetParent

rtm

RtmGetNetworkCount
MgmGetNextMfe
RtmAddRoute
RtmCreateEnumerationHandle
RtmRegisterClient
RtmEnumerateGetNextRoute
MgmDeRegisterMProtocol
RtmLookupIPDestination
MgmTakeInterfaceOwnership

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ea9d4bb1bde2f103054c182f8fedb6c8

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

winspool.drv

crypt32

msacm32

mapi32

shell32

rtutils

user32

rtm

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 3KB - Virtual size: 5KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 3KB - Virtual size: 5KB