112895b420d604979ba6b78c756063f0c17146097a41795d0922c2a173415c7e

Sharing

Copy URL

Twitter E-mail

General

Target

112895b420d604979ba6b78c756063f0c17146097a41795d0922c2a173415c7e
Size

428KB
MD5

5199b690874c0baa375855e37789569e
SHA1

ce65f46da270330e66da4fa879932f091f01fcc9
SHA256

112895b420d604979ba6b78c756063f0c17146097a41795d0922c2a173415c7e
SHA512

0fab6da9d104884a4300317e9a00ee909995ce7bd6afb76bfdcd220543591ebc66c572c819029dfe30729538dd18930da95b34192a36da4509cdce0d85b2dbfb
SSDEEP

12288:RGWf3BWLqi/f3xF7PxqViWValazc5ICyPFblCJxfS6:PBSqi/fxWiWVQqJOR1

Score

N/A

Malware Config

Signatures

Files

112895b420d604979ba6b78c756063f0c17146097a41795d0922c2a173415c7e
.exe windows x86

3276f26505015e6ac2c9b503ce4e0dba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

wsprintfW

kernel32

SetFirmwareEnvironmentVariableA
HeapWalk
CreateThread
GetTapeStatus
GetModuleFileNameA
SetFilePointerEx
GlobalMemoryStatusEx
GetFirmwareEnvironmentVariableA
DeleteTimerQueue

msvcrt

wcstoul
memcpy
isalnum

pdh

PdhGetCounterInfoW

oleaut32

VarCyFromI1

ntdsapi

DsFreeSpnArrayA

imm32

ImmDestroyContext

setupapi

SetupBackupErrorA

ole32

HMENU_UserUnmarshal

clusapi

OpenCluster

comdlg32

PageSetupDlgW
ChooseColorA

urlmon

CoInternetCombineUrl

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ordo
Size: 4KB - Virtual size: 847B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.t
Size: 4KB - Virtual size: 46B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mrt1
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3276f26505015e6ac2c9b503ce4e0dba

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

pdh

oleaut32

ntdsapi

imm32

setupapi

ole32

clusapi

comdlg32

urlmon

Sections

.text Size: 16KB - Virtual size: 12KB

ordo Size: 4KB - Virtual size: 847B

.t Size: 4KB - Virtual size: 46B

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 100KB - Virtual size: 367KB

.mrt1 Size: 100KB - Virtual size: 97KB

CODE Size: 100KB - Virtual size: 97KB

.rsrc Size: 96KB - Virtual size: 94KB

.text
Size: 16KB - Virtual size: 12KB

ordo
Size: 4KB - Virtual size: 847B

.t
Size: 4KB - Virtual size: 46B

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 100KB - Virtual size: 367KB

.mrt1
Size: 100KB - Virtual size: 97KB

CODE
Size: 100KB - Virtual size: 97KB

.rsrc
Size: 96KB - Virtual size: 94KB