efa944e6e41c45994cc6ec854375d6dda1f3d092abc5f2939f3054c3506f7e45

Sharing

Copy URL

Twitter E-mail

General

Target

efa944e6e41c45994cc6ec854375d6dda1f3d092abc5f2939f3054c3506f7e45
Size

17KB
MD5

9dc8ac2886e12b490fd4d9ef71b41463
SHA1

d58cad02e7f47e3eac57247daef20db7b4f59c2c
SHA256

efa944e6e41c45994cc6ec854375d6dda1f3d092abc5f2939f3054c3506f7e45
SHA512

567025dd7c196819b3af3cdff3295fefb6d20d4c8a91ce226b21ccc0b3102dd115c841b68cb6b5937f84666d292c4b2e83c679cb60345c3ba603aa14595160ba
SSDEEP

384:LBvsGRiT4KCbMqp317Motg7gNPHlECoya4bDq+TWno5W:Ld1LHt8gLE1k9

Score

1^/10

Malware Config

Signatures

Files

efa944e6e41c45994cc6ec854375d6dda1f3d092abc5f2939f3054c3506f7e45
.exe windows x86

a06d3c30b2d2a7e65cb59129ce23a1d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
OpenProcessToken
DeregisterEventSource
ReportEventW
RegCloseKey
RegisterEventSourceW
GetUserNameW

crypt32

CryptProtectData

winspool.drv

SpoolerInit

user32

wsprintfW
CharNextW
LoadStringW
MessageBoxW
LoadRemoteFonts

shell32

ShellExecuteExW

ntdll

NtClose
_chkstk
_wcsicmp
NtOpenKey
DbgPrint
wcscpy
RtlInitUnicodeString
memmove

imm32

ImmDisableIME

userenv

ord175

msvcrt

__set_app_type
_controlfp
_except_handler3
__p__fmode
_adjust_fdiv
__setusermatherr
_initterm
exit
_XcptFilter
_exit
_acmdln
__getmainargs
__p__commode

kernel32

GetCurrentProcessId
SetEvent
GetModuleHandleA
CompareFileTime
GetThreadLocale
GetCurrentThread
SetThreadPriority
CreateThread
TerminateThread
LoadLibraryW
GetProcAddress
FreeLibrary
Sleep
OpenEventW
GetEnvironmentVariableW
SetCurrentDirectoryW
GetPrivateProfileStringW
GetFileAttributesExW
GetCurrentProcess
GetLastError
FormatMessageW
SetEnvironmentVariableW
lstrcatW
lstrcmpiW
GetSystemDirectoryW
GetStartupInfoA
SearchPathW
ExpandEnvironmentStringsW
LocalAlloc
LocalFree
CreateProcessW
lstrlenW
lstrcpyW
WaitForSingleObject
CloseHandle

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a06d3c30b2d2a7e65cb59129ce23a1d9

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

crypt32

winspool.drv

user32

shell32

ntdll

imm32

userenv

msvcrt

kernel32

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 280B

.rsrc Size: 3KB - Virtual size: 32KB

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 280B

.rsrc
Size: 3KB - Virtual size: 32KB