48a715b09982d01b571a4b20b01b71cf805ef1920a100c610ed26c165e13ab63

Sharing

Copy URL Twitter E-mail

General

Target

48a715b09982d01b571a4b20b01b71cf805ef1920a100c610ed26c165e13ab63
Size

751KB
MD5

6d84765291d9b5c2466fe72a79ad4d24
SHA1

856d685fbabe17ad3e71f0f19b80d6fd43941f5c
SHA256

48a715b09982d01b571a4b20b01b71cf805ef1920a100c610ed26c165e13ab63
SHA512

198372a8a4cc2280d8f8555633fe69f1bf05caa692fa1ef9e288887873e52674e4d7faeacfe923229ce1c606cf88592c189071315419f37cfb8bc403e4b98194
SSDEEP

12288:fZNuZmHAKtQHxr3AWSPSncvhCMciqIXnZUmDmddUfs9jkbS4YnlOyPXatZaLkTIc:BNu2hQyWTcvXXnXDmD26jkbS4YnsI0ai

Score

N/A

Malware Config

Signatures

Files

48a715b09982d01b571a4b20b01b71cf805ef1920a100c610ed26c165e13ab63
.exe windows x86

f70072720695b68c343a9b7d595b1751

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCommandLineA
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
Sleep
VirtualFree
UnmapViewOfFile
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCPInfo
GetCommandLineW
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GetProcAddress
FindNextFileA
CompareStringA
CompareStringW
WaitForMultipleObjects
DeleteFileW
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
FreeLibrary
lstrcmpiA
GetVersion
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
SetEndOfFile
GlobalAlloc
TerminateProcess
SetEnvironmentVariableA
CreateThread
GetLocalTime
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
GetFileAttributesW
GetModuleFileNameA
GetVersionExA
TlsGetValue
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
GlobalLock
LoadResource
InitializeCriticalSection
LocalFree
SetEvent
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
WideCharToMultiByte
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
SetUnhandledExceptionFilter
HeapDestroy
GetDriveTypeA
WaitForSingleObject
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetCurrentThread
GetCurrentProcessId
GetLastError
GetTickCount
SetHandleCount
GetCurrentThreadId

user32

LoadCursorA
GetDlgItem
CreateWindowExA
CheckMenuItem
SetWindowTextA
DefWindowProcA
SetFocus
EndPaint
DispatchMessageA
FillRect
SetTimer
GetWindowLongA
RegisterClassA
EnableMenuItem
SetForegroundWindow
LoadStringA
PeekMessageA
GetDesktopWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
TranslateMessage
GetCursorPos
GetDC
IsWindow
SetWindowPos
PostQuitMessage
SystemParametersInfoA
IsWindowVisible
InvalidateRect
GetClientRect
CallWindowProcA
SetCursor
EndDialog
MessageBoxA
EnableWindow
GetSysColor

gdi32

CreateSolidBrush
CreateCompatibleDC
GetStockObject
BitBlt
SelectObject

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString

Sections

.text
Size: 716KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f70072720695b68c343a9b7d595b1751

Headers

File Characteristics

Imports

kernel32

user32

gdi32

oleaut32

Sections

.text Size: 716KB - Virtual size: 1.0MB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 9KB - Virtual size: 8KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 716KB - Virtual size: 1.0MB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 18KB - Virtual size: 18KB