139ea7d22e38a9f4894f06dcb5286aa42de41297

Sharing

Copy URL

Twitter E-mail

General

Target

139ea7d22e38a9f4894f06dcb5286aa42de41297
Size

52KB
MD5

84fd7094e873bdda344332401b76dfa9
SHA1

139ea7d22e38a9f4894f06dcb5286aa42de41297
SHA256

9e41cfc0982f5b467ce59e8fe10d40bdbbcafcf188bedeac1152cc976e7be755
SHA512

ef4eec540a54a54aa0e8ac3fba0e9d800d35b542389713b1651d80fc4ca541860c9bdaf9d2ace488f8ca4d542230cd57300f067240aa3bc4417a88f28be53342
SSDEEP

768:OC4hVOuFRRsuMwDzhuzSfUMtZIUSbY0EEgY2iV/UPHNKyWNe63cSHIdk:KzRpMwDzhpLfi+hdSoO

Score

N/A

Malware Config

Signatures

Files

139ea7d22e38a9f4894f06dcb5286aa42de41297
.exe windows x86

7aab4377e170b09f6ce64a6276c35bcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateStatusWindowW
ord17

kernel32

Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
IsWow64Process
GetModuleHandleW
LCMapStringEx
HeapSize
CloseHandle
CreateFileW
GetStringTypeW
GetConsoleCP
WideCharToMultiByte
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
TerminateProcess
FlsFree
FlsSetValue
FlsGetValue
CreateProcessW
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentThreadId
InterlockedIncrement
SetLastError
RtlUnwind
GetStartupInfoW
InitOnceExecuteOnce
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetConsoleMode
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
GetModuleFileNameW
WriteFile
GetStdHandle
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
InterlockedDecrement
DecodePointer
EncodePointer
GetProcessHeap
IsProcessorFeaturePresent
SetEndOfFile
ReadFile
HeapReAlloc
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
GetTickCount
GetExitCodeProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
GetCommandLineW
WriteConsoleW
FlsAlloc
GetLastError

ole32

OleGetIconOfFile
HACCEL_UserUnmarshal
CreateDataCache
CreateStreamOnHGlobal
HMETAFILEPICT_UserMarshal
HPALETTE_UserMarshal
HENHMETAFILE_UserFree
StgOpenStorage
SNB_UserMarshal
HBRUSH_UserUnmarshal

winspool.drv

EnumPrintProcessorsW
DeletePrintProvidorW
FindClosePrinterChangeNotification
ord213
ClosePrinter

winmm

midiInAddBuffer
mmioStringToFOURCCW
midiInGetErrorTextA
mmioRead

setupapi

SetupInstallServicesFromInfSectionW
SetupDiSetDriverInstallParamsA

rtutils

RouterLogRegisterA
LogErrorA
TraceVprintfExA
TracePutsExW
TraceDumpExW
TraceDumpExA
MprSetupProtocolEnum
TraceGetConsoleW

user32

UpdateWindow
GetSubMenu
CheckMenuItem
DestroyMenu
LoadMenuW
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
RegisterClipboardFormatW
ShowWindow
CreateWindowExW
RegisterClassExW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadStringW
GetParent
LoadIconW
LoadCursorW
LoadImageW

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7aab4377e170b09f6ce64a6276c35bcc

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

ole32

winspool.drv

winmm

setupapi

rtutils

user32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 12KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 12KB