48f05cc6228dc792192f56f78667c192b27468ed1898b7f8c9d228608e95da8c

Sharing

Copy URL Twitter E-mail

General

Target

48f05cc6228dc792192f56f78667c192b27468ed1898b7f8c9d228608e95da8c
Size

720KB
MD5

57be272bf79ec9d57dde021ffeffa8d5
SHA1

2c0796d1da6f040cfaa8670248dc41aee8bf4cf3
SHA256

48f05cc6228dc792192f56f78667c192b27468ed1898b7f8c9d228608e95da8c
SHA512

3df5372d1a58fedf42a909522baa2838cebf6ee969baa92def1744312d5cf7fc28cbe8d65140cb2ec2111cb3b1ccfa8539370c5458fe6496ac33fc5965cfd5a6
SSDEEP

12288:7dubkcP/aK2vB+yiSuijwHYKVuRUgOkuuU8hT65QPiru/AQgUOk:7aksCKABZiFoSVupxYSW6PcEAm

Score

N/A

Malware Config

Signatures

Files

48f05cc6228dc792192f56f78667c192b27468ed1898b7f8c9d228608e95da8c
.exe windows x86

f6ff8641c37093e7ad2523c487302663

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

kernel32

FreeEnvironmentStringsW
LoadLibraryA
SetHandleCount
GetProcessHeap
CreatePipe
CreateProcessA
CloseHandle
PeekNamedPipe
ReadFile
GetExitCodeProcess
GetEnvironmentVariableA
CreateWaitableTimerA
SetWaitableTimer
Sleep
CreateIoCompletionPort
GetQueuedCompletionStatus
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
GetTickCount
WriteFile
CreateFileA
FreeLibrary
GetProcAddress
LCMapStringA
FlushFileBuffers
SetStdHandle
LCMapStringW
IsBadCodePtr
SetUnhandledExceptionFilter
GetCommandLineA
GetVersion
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW

imagehlp

MakeSureDirectoryPathExists

shlwapi

PathFindFileNameA

user32

GetMessageA
MsgWaitForMultipleObjects
WaitForInputIdle
wsprintfA
DispatchMessageA
TranslateMessage
PeekMessageA
MessageBoxA

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 584KB - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f6ff8641c37093e7ad2523c487302663

Headers

File Characteristics

Imports

shell32

kernel32

imagehlp

shlwapi

user32

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 584KB - Virtual size: 636KB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 584KB - Virtual size: 636KB

.rsrc
Size: 68KB - Virtual size: 66KB