49be3b74174ac7e45a9726a20f3b3c77aa5f44f8b87642a7214bbcf69e98af09

Sharing

Copy URL Twitter E-mail

General

Target

49be3b74174ac7e45a9726a20f3b3c77aa5f44f8b87642a7214bbcf69e98af09
Size

292KB
MD5

6cb045c1c110be697e645a2c910b2ae0
SHA1

6e7bef965b9f7157ccd573637a89f0d36e431cbe
SHA256

49be3b74174ac7e45a9726a20f3b3c77aa5f44f8b87642a7214bbcf69e98af09
SHA512

d02f5416d57f7b89a2708551aac92255f7b9a74eade88171da481d0e14a998e986b624e4cffd8e414c25d4969b49e05f35e2138c1e33b51f7909e8661c83d880
SSDEEP

6144:lLWIJ+Yxj0mU7lByxB50DAqF3oSjFt1DYAvX:ljQYZOoB5OUOFtdYAv

Score

N/A

Malware Config

Signatures

Files

49be3b74174ac7e45a9726a20f3b3c77aa5f44f8b87642a7214bbcf69e98af09
.exe windows x86

c801448d43635c9b217e5faed63706ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetCommandLineA
GetEnvironmentStrings
GetACP
FreeLibrary
ResetEvent
CloseHandle
GetTickCount
GlobalAlloc
FileTimeToSystemTime
HeapAlloc
FlushFileBuffers
CreateFileA
LCMapStringW
ReadFile
SetFilePointer
HeapReAlloc
GetModuleFileNameW
GetLastError
LocalFree
ExitProcess
FindClose
CreateThread
GetFileType
GetOEMCP
DeleteCriticalSection
GetModuleHandleA
GetVersionExA
GetFileSizeEx
FindResourceW
SetHandleCount
GetVersionExW
InterlockedExchangeAdd
HeapDestroy
Sleep
LocalAlloc
RaiseException
FreeEnvironmentStringsA
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
FileTimeToLocalFileTime
GetCurrentProcess
InterlockedCompareExchange
CreateMutexW
GetFileSize
WaitForSingleObject
WriteFile
LeaveCriticalSection
TlsSetValue
EnterCriticalSection
TryEnterCriticalSection
CreateEventW
InterlockedExchange
FreeLibraryAndExitThread
SizeofResource
GetModuleHandleW
TlsGetValue
GetStdHandle
FormatMessageW
InterlockedIncrement
GetStringTypeW
SetStdHandle
WaitForMultipleObjects
GlobalFree
SetEnvironmentVariableA
CreateEventA
GetFileAttributesA
lstrlenA
GetEnvironmentStringsW
GetCurrentProcessId
GetCurrentThread
InterlockedDecrement
CompareStringA
GetLocaleInfoW
LoadLibraryA
GetCommandLineW
GetStartupInfoA
GetVersion
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
GetEnvironmentVariableA
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InitializeCriticalSection
FatalAppExitA
GetCPInfo
IsBadWritePtr
GetProcAddress
LCMapStringA
GetStringTypeA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringW

shlwapi

PathGetDriveNumberA

iphlpapi

GetIfTable

Sections

.text
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c801448d43635c9b217e5faed63706ba

Headers

File Characteristics

Imports

kernel32

shlwapi

iphlpapi

Sections

.text Size: 252KB - Virtual size: 248KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 252KB - Virtual size: 248KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 12KB - Virtual size: 10KB