1ff0255ea30119641c903ec9e3eabe1e6df9424bc9d6e8c102b91cc540752f01

Sharing

Copy URL

Twitter E-mail

General

Target

1ff0255ea30119641c903ec9e3eabe1e6df9424bc9d6e8c102b91cc540752f01
Size

200KB
MD5

aca6b429452d084712a9cc51fa3f269f
SHA1

39c8b8edd12ec1eb369e1b1d1b4cc49112c9fb25
SHA256

1ff0255ea30119641c903ec9e3eabe1e6df9424bc9d6e8c102b91cc540752f01
SHA512

b3746b5f6f5a8f6f2760d62a61c9a8c2533696ef09fafdc8cb8470965391f754e38f8d15195675428ae618e5c83e39637cbcdcc33d8711d322330ba1949b26b5
SSDEEP

3072:eUD5yZPrNZXGSUKpvbQC2mCcv5l8ljo1+LoudHTCn0Uetz4Ag0FuG732+oSNPUfr:eUIF7GSUKZT8KYLb14AOm32HSxor

Score

N/A

Malware Config

Signatures

Files

1ff0255ea30119641c903ec9e3eabe1e6df9424bc9d6e8c102b91cc540752f01
.exe windows x86

c80f9cfc954875e88dede029b79ac8a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
GetModuleFileNameA
HeapFree
CreateEventA
MapViewOfFile
CreateFileMappingA
GetProcessHeap
HeapAlloc
Sleep
GetFileAttributesW
WideCharToMultiByte
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
UnmapViewOfFile
TerminateThread
CreateThread
GetPrivateProfileIntW
WriteConsoleW
FlushFileBuffers
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
GetCPInfo
GetConsoleCP
GetPrivateProfileStringW
MultiByteToWideChar
SetEvent
GetLastError
CloseHandle
GetModuleHandleA
GetProcAddress
GetConsoleMode
SetFilePointerEx
GetStringTypeW
LCMapStringW
CompareStringW
GetACP
GetStdHandle
GetModuleHandleExW
FreeLibrary
GetCurrentProcess
TerminateProcess
WriteFile
FindClose
SystemTimeToFileTime
FindFirstFileW
FindNextFileA
FindNextFileW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetSystemTime
InitializeCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCommandLineA
GetCommandLineW
CreateFileW
GetFileType
ExitProcess

advapi32

CloseServiceHandle
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenSCManagerA
CreateServiceA
OpenServiceA
QueryServiceStatusEx
ChangeServiceConfig2A
StartServiceA
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
StartServiceCtrlDispatcherA
EnumServicesStatusA
SetServiceStatus
RegisterServiceCtrlHandlerA
DeleteService
QueryServiceStatus
ControlService

shlwapi

PathAppendA
PathAppendW
PathRemoveFileSpecA

psapi

GetModuleFileNameExW
GetModuleFileNameExA
GetModuleBaseNameA
EnumProcessModules

winspool.drv

ClosePrinter
GetPrinterA
EnumJobsA
SetJobA
OpenPrinterA

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c80f9cfc954875e88dede029b79ac8a2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shlwapi

psapi

winspool.drv

Sections

.text Size: 134KB - Virtual size: 133KB

.rdata Size: 53KB - Virtual size: 53KB

.data Size: 2KB - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 332B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 134KB - Virtual size: 133KB

.rdata
Size: 53KB - Virtual size: 53KB

.data
Size: 2KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 332B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB