50470eef8045cc6519a76d5a75fdeb2c36f7010a00f56419cc82d38cfad8ac92

Sharing

Copy URL Twitter E-mail

General

Target

50470eef8045cc6519a76d5a75fdeb2c36f7010a00f56419cc82d38cfad8ac92
Size

442KB
MD5

933e8368bf5868420ef6c0711a798356
SHA1

5dfc6478fe214f27b814dfc9ea2e0942bf5caa1d
SHA256

50470eef8045cc6519a76d5a75fdeb2c36f7010a00f56419cc82d38cfad8ac92
SHA512

6350582e8b6ed910d9e46df846ed882b1d6257de694241eb61c25107d58e2d11d692f22ee796ae44000fcc165e86fabe40b5364f3c62843bbd18977108e81fc4
SSDEEP

12288:OJgnU85BRyq95jmujgEITov3ch0hJplKvlUQU3oP:JnLBkkNHUQshmJplK9Ur3o

Score

N/A

Malware Config

Signatures

Files

50470eef8045cc6519a76d5a75fdeb2c36f7010a00f56419cc82d38cfad8ac92
.exe windows x86

0ae358d54711ec658d82968577c6ece3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glVertex4fv
glIndexdv
glTexCoordPointer
glLogicOp
glRasterPos3s
glFogiv
glEvalCoord1dv
glColorMask
glMaterialiv
glEndList
glDisableClientState
glIsTexture

comctl32

ord16
ord3
DrawStatusTextW
InitCommonControlsEx
ord2
ord8
InitializeFlatSB
ord5

shlwapi

StrStrA
StrChrIW
StrCSpnA
StrRChrIW

kernel32

GetModuleHandleA
GetProcAddress
GetModuleFileNameA
GetComputerNameA
GetACP
GetProcessHeap
TlsGetValue
LocalHandle
GetExitCodeThread
GetCurrentProcess
GetStartupInfoA
GetStdHandle
ResetEvent
VirtualAlloc
LocalLock
GetCommandLineA
GetVersion
ExitProcess
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetFileType
WriteFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
SetFilePointer
GetCPInfo
GetOEMCP
HeapReAlloc
LoadLibraryA
LCMapStringA
LCMapStringW

winspool.drv

AddPrintProcessorA
EnumPrintersA
ClosePrinter
EnumPrinterDriversW
DeletePrinter
SetPrinterW
DeletePrinterConnectionA

uxtheme

DrawThemeIcon
ord47
DrawThemeEdge
GetThemeBool
GetThemeBackgroundRegion

wsnmp32

ord400
ord602
ord220
ord204
ord206
ord901
ord100
ord105
ord202
ord503
ord903
ord200

activeds

ord19
ord21
ord9
ord17
ord7
ord23
ord3
ord4
ord15

setupapi

SetupGetLineCountA
SetupScanFileQueueW
SetupInstallFileExA
SetupFindNextLine
SetupFindFirstLineW

comdlg32

PageSetupDlgA
PrintDlgA
ChooseFontA
GetOpenFileNameW
CommDlgExtendedError
PrintDlgW
ReplaceTextW
GetSaveFileNameW
GetFileTitleW
PageSetupDlgW

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ae358d54711ec658d82968577c6ece3

Headers

File Characteristics

Imports

opengl32

comctl32

shlwapi

kernel32

winspool.drv

uxtheme

wsnmp32

activeds

setupapi

comdlg32

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 541KB

.rsrc Size: 401KB - Virtual size: 400KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 541KB

.rsrc
Size: 401KB - Virtual size: 400KB

.reloc
Size: 4KB - Virtual size: 4KB