48ece4e66a9fde7bd726e74a3487fba7deed045a8251eaf9e5bbe8956689b002

Sharing

Copy URL

Twitter E-mail

General

Target

48ece4e66a9fde7bd726e74a3487fba7deed045a8251eaf9e5bbe8956689b002
Size

196KB
MD5

6eacc565fc60d6e664683d86fa08dac0
SHA1

7a248b42d34d80a8741a9ad63a18b81d8ceff4d4
SHA256

48ece4e66a9fde7bd726e74a3487fba7deed045a8251eaf9e5bbe8956689b002
SHA512

c47b65368877a1c00ddf7784cd4f45acb8fa88e811eb117d3b8dd098bdf3648f8c650d64175fda00bed79085afb95779d2ffbafee7b47745a37b7303bbe95b1a
SSDEEP

1536:ZVLSvyrfbSwWEP115RUIV6ffI8xotrah13/8HJNyyriH4wkfdWcGAN28KD+YzGJQ:OvyrfbfWEPzU7fNSa2+eiH43fDZKfV

Score

N/A

Malware Config

Signatures

Files

48ece4e66a9fde7bd726e74a3487fba7deed045a8251eaf9e5bbe8956689b002
.exe windows x86

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrcatW
VirtualAlloc
HeapAlloc
GetProcessHeap
_lclose
WideCharToMultiByte
WaitForSingleObject
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetEvent
SetErrorMode
SearchPathW
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalReAlloc
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
IsBadCodePtr
GlobalUnlock
GlobalSize
GlobalLock
GlobalGetAtomNameW
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetProfileStringW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleA
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FormatMessageW
ExitThread
ExitProcess
CreateThread
CreateProcessW
CreateFileW
CreateEventW
lstrlenW
CloseHandle

user32

UnregisterDeviceNotification
UpdateWindow
wsprintfA
GetSysColor
OpenIcon
CharNextW
CharUpperA
CharNextA
IsWindow
GetWindowContextHelpId
SendMessageA
LoadBitmapA
UnhookWindowsHook
TranslateMessage
TranslateAcceleratorW
SystemParametersInfoW
ShowWindow
SetWindowPos
SetRectEmpty
SetRect
SetParent
SetMenu
SetForegroundWindow
SetCursor
SetActiveWindow
RemoveMenu
RegisterDeviceNotificationW
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
LoadMenuW
LoadImageW
LoadIconW
LoadAcceleratorsW
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
InsertMenuW
InflateRect
GetWindowPlacement
GetSystemMetrics
GetSubMenu
GetMenuItemCount
GetMenu
GetDialogBaseUnits
GetDesktopWindow
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
EqualRect
EnableMenuItem
DrawTextW
DrawMenuBar
DrawIcon
DispatchMessageW
DestroyWindow
DestroyMenu
DeleteMenu
CreateWindowExW
CreateMenu
CopyAcceleratorTableW
CheckMenuItem
CharLowerBuffW
BringWindowToTop
AdjustWindowRect
IsZoomed

gdi32

DeleteMetaFile
DeleteObject
ExcludeClipRect
GetBkMode
GetDIBits
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetROP2
GetStockObject
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextExtentPoint32W
LineTo
CreatePatternBrush
MoveToEx
PatBlt
Polygon
RealizePalette
Rectangle
DeleteDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetROP2
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
StretchDIBits
TextOutW
GetFontLanguageInfo
UnrealizeObject
StrokePath
AbortPath
CreateSolidBrush
RestoreDC
CloseMetaFile
CreatePalette
CreateMetaFileW
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CreatePen

advapi32

RegQueryValueExW
RegOpenKeyExA

shell32

SHGetFileInfoW
ExtractIconW
DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW

winmm

timeGetTime

msvcrt

memset
memcpy

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a0
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

winmm

msvcrt

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 1024B - Virtual size: 1020B

.a0 Size: 20KB - Virtual size: 19KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 1024B - Virtual size: 1020B

.a0
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 39KB - Virtual size: 39KB