e4639d255b46321ff950bee6ceed10443364eae9f4e78505df0f00a994f23338

Sharing

Copy URL Twitter E-mail

General

Target

e4639d255b46321ff950bee6ceed10443364eae9f4e78505df0f00a994f23338
Size

152KB
MD5

4c1bb4b85b60eed7e2b3ff65ffe0f8c0
SHA1

217696f73de5d567b3e26a22021eb8bc0013b903
SHA256

e4639d255b46321ff950bee6ceed10443364eae9f4e78505df0f00a994f23338
SHA512

a12105977250f9ab41ebacbbfb71ba3aed3dccba16ba2004a4cfaf77262e97f855d73fd605eb8f28c03312f11bd4ffe7cb6c84579e0f48569915dda0fa767fd4
SSDEEP

3072:ERdSJVFK3BVDLtlpmlugE0McgVauYASOio3:EReVg3DElNE5cgVzYbo

Score

N/A

Malware Config

Signatures

Files

e4639d255b46321ff950bee6ceed10443364eae9f4e78505df0f00a994f23338
.dll windows x86

737fbb800fdb542d65dce2bca9cce225

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

psapi

EnumProcesses

kernel32

IsDebuggerPresent
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLastError
DeviceIoControl
GetOverlappedResult
WaitForSingleObject
WriteFile
CloseHandle
ReadFile
CreateEventA
ReleaseMutex
UnmapViewOfFile
ExitThread
SetEvent
ResetEvent
OpenMutexA
CreateMutexA
MapViewOfFile
CreateFileMappingA
CreateThread
GetCurrentProcessId
SetNamedPipeHandleState
WaitNamedPipeA
SetStdHandle
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
MultiByteToWideChar
GetLocaleInfoA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

MessageBoxA

Exports

Exports

IccLibAcquireClockOwnership
IccLibAcquireUOBOwnership
IccLibDialToFrequency
IccLibFrequencyToDial
IccLibGetClockCount
IccLibGetClockNearestFrequency
IccLibGetClockRanges
IccLibGetClockSettings
IccLibGetLockInfo
IccLibGetUobLockInfo
IccLibInit
IccLibReleaseClockOwnership
IccLibReleaseUOBOwnership
IccLibSetClockSettings
IccLibShutdown
IccLibStopUsingSimulator
IccLibUseSimulator

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

737fbb800fdb542d65dce2bca9cce225

Headers

File Characteristics

Imports

setupapi

psapi

kernel32

user32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 8KB - Virtual size: 4KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 8KB - Virtual size: 4KB

.rmnet
Size: 60KB - Virtual size: 60KB