c4096bf2ea3db792521e5afcfa4b283b78421c7da9e632f99322ceaff0df32cd[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

c4096bf2ea3db792521e5afcfa4b283b78421c7da9e632f99322ceaff0df32cd.bin
Size

3.1MB
MD5

e144ea07aa3fd89506b6280b0f5cc0bb
SHA1

df4d6b17a7f8e2ea2435c17f49d66238fa244e12
SHA256

c4096bf2ea3db792521e5afcfa4b283b78421c7da9e632f99322ceaff0df32cd
SHA512

be4857da3a25ff7719e6c3c49d4074a8401c8e2eff3e51634b52bc63c78d41535e64c12e331f16c36d6fd99aeea60c785ddde589b562eb3309d22fc119769f41
SSDEEP

98304:s4t+NDsetI+pIopNgbktTVJydZYMMxMola8MMMMgYuLuNNUMMMMMM:s4cNAetIS5T4

Score

N/A

Malware Config

Signatures

Files

c4096bf2ea3db792521e5afcfa4b283b78421c7da9e632f99322ceaff0df32cd.bin
.exe windows x86

29d50fd63e260b429b6065bd90eb3e78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

VariantClear

advapi32

RegOpenKeyExW

user32

FrameRect

kernel32

SetEvent
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

msimg32

AlphaBlend

gdi32

GetDIBColorTable

version

GetFileVersionInfoW

ole32

CoTaskMemFree

comctl32

ImageList_SetOverlayImage

winspool.drv

DocumentPropertiesW

msvcrt

isxdigit

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29d50fd63e260b429b6065bd90eb3e78

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

comctl32

winspool.drv

msvcrt

Sections

.text Size: - Virtual size: 1.2MB

.itext Size: - Virtual size: 5KB

.data Size: - Virtual size: 75KB

.bss Size: - Virtual size: 21KB

.idata Size: - Virtual size: 13KB

.didata Size: - Virtual size: 670B

.tls Size: - Virtual size: 60B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 2.5MB

.vmp1 Size: 2.7MB - Virtual size: 2.7MB

.reloc Size: 512B - Virtual size: 180B

.rsrc Size: 352KB - Virtual size: 352KB

.text
Size: - Virtual size: 1.2MB

.itext
Size: - Virtual size: 5KB

.data
Size: - Virtual size: 75KB

.bss
Size: - Virtual size: 21KB

.idata
Size: - Virtual size: 13KB

.didata
Size: - Virtual size: 670B

.tls
Size: - Virtual size: 60B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 2.5MB

.vmp1
Size: 2.7MB - Virtual size: 2.7MB

.reloc
Size: 512B - Virtual size: 180B

.rsrc
Size: 352KB - Virtual size: 352KB