48f440012a64d493497ce86f009d63a380cd6d6c2c0360b223836d22ff9936e3

Sharing

Copy URL Twitter E-mail

General

Target

48f440012a64d493497ce86f009d63a380cd6d6c2c0360b223836d22ff9936e3
Size

850KB
MD5

427e3e0ee891b397f5c0776a18c5e047
SHA1

28146e057a934cb930efc2cd138e4734f92091b2
SHA256

48f440012a64d493497ce86f009d63a380cd6d6c2c0360b223836d22ff9936e3
SHA512

070edba2b2ec3e0f51f47caa805ec609c5f1dc95658d17e2afbfd72f2019c6438b9c4c9bd666b3e65deae4b67d7b51c1d47f4a66147fc043cedc4ef4da0258b4
SSDEEP

24576:DVPwEGauYcxFni4H+baprjsVrlpGkeXlw:DVSaCFntebaprAVDGD

Score

N/A

Malware Config

Signatures

Files

48f440012a64d493497ce86f009d63a380cd6d6c2c0360b223836d22ff9936e3
.exe windows x86

4a7be84f2d1f245c117742b6556b5546

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
LocalFree
HeapReAlloc
ConvertDefaultLocale
LoadResource
GetOEMCP
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
FileTimeToSystemTime
LCMapStringA
GlobalUnlock
GlobalDeleteAtom
GetLocaleInfoA
GetCurrentThread
CloseHandle
SetHandleCount
QueryPerformanceCounter
GlobalFlags
SetStdHandle
TlsSetValue
GetStringTypeA
LocalFileTimeToFileTime
GetStdHandle
GetLastError
GlobalAlloc
TlsFree
FileTimeToLocalFileTime
RtlUnwind
IsDebuggerPresent
GetFileType
VirtualFree
HeapCreate
CreateFileA
TlsAlloc
GetVersion
GetEnvironmentStrings
SetErrorMode
TerminateProcess
RaiseException
GetACP
UnlockFile
GetConsoleOutputCP
GetCommandLineW
VirtualQuery
ReadFile
WriteConsoleA
GlobalFree
GetFileSize
GlobalHandle
GetSystemInfo
GetWindowsDirectoryA
LocalReAlloc
DuplicateHandle
GetThreadLocale
GlobalReAlloc
LockResource
SetEndOfFile
lstrcmpA
HeapAlloc
SetEnvironmentVariableA
FlushFileBuffers
HeapSize
FreeLibrary
GetFileTime
GlobalLock
FreeResource
GetSystemDirectoryA
CompareStringA
LockFile
GetCommandLineA
SetFileTime
SizeofResource
HeapFree
LocalAlloc
GetVersionExA
SystemTimeToFileTime
GetConsoleMode
HeapDestroy
lstrcpyA
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcatA
InitializeCriticalSection
GetModuleFileNameA
GetProcessHeap

user32

GetScrollPos
GetSystemMetrics
GetWindowPlacement
CopyRect
MapWindowPoints
ValidateRect
TrackPopupMenu
MessageBeep
GetWindowDC
ReuseDDElParam
ReleaseCapture
GetDC
GetLastActivePopup
SetWindowPos
GetDesktopWindow
EndDeferWindowPos
BeginPaint
GetClientRect
GetNextDlgGroupItem
GetWindowThreadProcessId
GetSysColor
OffsetRect
TranslateMessage
GetWindowRect
GetTopWindow
IsWindow
DeferWindowPos
ScreenToClient
FillRect
GetNextDlgTabItem
PtInRect
GetSysColorBrush
BeginDeferWindowPos
EqualRect
ShowScrollBar
IsChild
IntersectRect
GetDlgItem
SetWindowContextHelpId
GetFocus
SetRectEmpty
GetMenu
GetParent
SendDlgItemMessageA
IsWindowVisible
MoveWindow
SetParent
GetMenuItemID
GetMenuCheckMarkDimensions
AdjustWindowRectEx
SetActiveWindow
InflateRect
ShowWindow
SetMenuItemBitmaps
GetCapture
RedrawWindow
SetScrollPos
GetMessageTime
GetScrollInfo
GetActiveWindow
SetCapture
UpdateWindow
UnpackDDElParam
SetScrollInfo
SetScrollRange
GetSystemMenu
EnableMenuItem
IsRectEmpty
DestroyMenu
ReleaseDC
PostQuitMessage
EndDialog
CreatePopupMenu
InvalidateRect
KillTimer
GetScrollRange
EndPaint
ShowOwnedPopups
LockWindowUpdate
SetWindowRgn
IsWindowEnabled
IsZoomed
SetForegroundWindow
MapDialogRect
SetMenu
GetMenuItemCount
CheckMenuItem
GetWindow
SetFocus

gdi32

SetBkMode
OffsetRgn
SetMapMode
GetDeviceCaps
RestoreDC
DPtoLP
SetBkColor
ScaleWindowExtEx
GetBkColor
ExtSelectClipRgn
GetRgnBox
SetTextColor
CreatePatternBrush
DeleteObject
RectVisible
PtVisible
SetRectRgn
GetPixel
ExcludeClipRect
SetViewportOrgEx
SelectClipRgn
GetClipBox
GetMapMode
CreateCompatibleBitmap
SetViewportExtEx
GetWindowExtEx
ScaleViewportExtEx
Ellipse
OffsetViewportOrgEx
Escape
CreateRectRgn
BitBlt
SetWindowExtEx
CombineRgn
CreateRectRgnIndirect
SelectObject
DeleteDC
StretchDIBits
GetStockObject
CreateSolidBrush
GetTextColor
CreateBitmap
SaveDC
IntersectClipRect
PatBlt
CreateCompatibleDC

winspool.drv

ClosePrinter

advapi32

RegCloseKey
SetFileSecurityW

ole32

CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
OleFlushClipboard
CoRevokeClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleUninitialize
OleIsCurrentClipboard

oleaut32

SysAllocStringLen
SysStringLen
SafeArrayDestroy
VariantCopy
VariantInit
OleCreateFontIndirect
SysFreeString
VariantTimeToSystemTime
VariantClear
VariantChangeType
SystemTimeToVariantTime

comctl32

ord17

msvcrt

_CIcos

Sections

.text
Size: 663KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 171KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a7be84f2d1f245c117742b6556b5546

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

oleaut32

comctl32

msvcrt

Sections

.text Size: 663KB - Virtual size: 662KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 171KB - Virtual size: 256KB

.rsrc Size: 1024B - Virtual size: 952B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 663KB - Virtual size: 662KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 171KB - Virtual size: 256KB

.rsrc
Size: 1024B - Virtual size: 952B

.reloc
Size: 3KB - Virtual size: 3KB