49a9408fe90bab57d14e472d49c5386fe3d43c1a15683da6eb334fce1783964c

General

Target

49a9408fe90bab57d14e472d49c5386fe3d43c1a15683da6eb334fce1783964c
Size

48KB
MD5

b239bf855f53e7622ada719c0137e55a
SHA1

d44c247336d94dc9f774db854d04daec18178dad
SHA256

49a9408fe90bab57d14e472d49c5386fe3d43c1a15683da6eb334fce1783964c
SHA512

f9f02d211a16128fae76c4c24a7a29deb3ae8737d71c9903b0fe01acee8759f2064897532f2fd5ebba66dc1093297354447724ad13739baa64b080c75e7ba887
SSDEEP

768:yBloe64TC7f/KnxUBE+/tlNYIWemGvO31Pk6srJ76:be64TC7an2BEq7n0/srJ76

Score

N/A

Malware Config

Signatures

Files

49a9408fe90bab57d14e472d49c5386fe3d43c1a15683da6eb334fce1783964c
.dll windows x86

0ecf15c829121f00c574d8e96f427caa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualFree
VirtualAlloc
LoadLibraryA
GetModuleHandleA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
CreateFileA
GetFileSize
CopyFileA
GetPrivateProfileStringA
GetProcAddress
LoadLibraryW
GetLastError
CreateMutexA
GetModuleFileNameA
SetUnhandledExceptionFilter
CreateFileMappingA
Sleep
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
WriteFile
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

advapi32

GetUserNameA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ecf15c829121f00c574d8e96f427caa

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB