48d109f4129d729d95a16ffbbb0cd9c255d536b361e0f858d622876796d1079e

Sharing

Copy URL Twitter E-mail

General

Target

48d109f4129d729d95a16ffbbb0cd9c255d536b361e0f858d622876796d1079e
Size

92KB
MD5

8f547305736c397b1265af96dcbc2ffc
SHA1

9ad0ea0675132ce5d6de070a48c46180d0e1ad9a
SHA256

48d109f4129d729d95a16ffbbb0cd9c255d536b361e0f858d622876796d1079e
SHA512

9122f49607fe8c00ced1ab7f241845391524342d7ff7bb7bb4ff738032282fb67989222da80a1b1bec9535eb3fd4aa835f1f31c46ebfffd94ef323a15b88b4ee
SSDEEP

768:r/Js82PBcjUv6h2nxVQPKkk4cla8PED1Snecml0d/ZU9qZU9y:9sBPBgxoQSkJyNFd/p1

Score

N/A

Malware Config

Signatures

Files

48d109f4129d729d95a16ffbbb0cd9c255d536b361e0f858d622876796d1079e
.exe windows x86

294b7cd98f15caca1625ec5155be9caf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
VirtualAlloc
Sleep
GetCurrentProcess
GetTempPathA
WriteFile
WinExec
GetCommandLineA
GetLastError
IsProcessorFeaturePresent
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
RtlUnwind
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
HeapSetInformation
GetStartupInfoW
HeapFree
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
RaiseException

user32

DispatchMessageA
GetMessageA
LoadStringA
TranslateMessage
LoadAcceleratorsA
TranslateAcceleratorA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
UpdateWindow

ole32

CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

294b7cd98f15caca1625ec5155be9caf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

wininet

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 48KB - Virtual size: 48KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 48KB - Virtual size: 48KB