47a18da57259da9bbc3a600405c0b3612e27e0e59fb9f3c55df425aa507d5c4b

General

Target

47a18da57259da9bbc3a600405c0b3612e27e0e59fb9f3c55df425aa507d5c4b
Size

497KB
MD5

0d9a5da6123f2fde9694e780123c7780
SHA1

91fe244d214c5a6168d414cc9a85a790e6218979
SHA256

47a18da57259da9bbc3a600405c0b3612e27e0e59fb9f3c55df425aa507d5c4b
SHA512

e5a0b50d2406d0b808aa32a9ff0061e2a19f989ac573459e4893f67b0a97512b93c4670d6829fbb666f47702ede2a646a784dc58d43256bbb9a85c3f78386f42
SSDEEP

12288:KMGNjbmi6Wc+qgEIcxYHIbD5UMUPTXi0QFx:ZGMVIcx+IbVSQFx

Score

N/A

Malware Config

Signatures

Files

47a18da57259da9bbc3a600405c0b3612e27e0e59fb9f3c55df425aa507d5c4b
.exe windows x86

b50220282345d703c72088dd08a03730

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wcsicmp
sprintf
wcscpy
__winitenv
_XcptFilter
_except_handler3
__setusermatherr
printf
_cexit
__wgetmainargs
_c_exit
_exit
_controlfp
__p__fmode
_initterm
_adjust_fdiv
_stricmp
strstr

kernel32

MultiByteToWideChar
VirtualFree
GetProcAddress
ExpandEnvironmentStringsW
LocalFree
LocalAlloc
GetModuleFileNameW
LoadLibraryA
GetCurrentProcessId
FreeLibrary
ProcessIdToSessionId
WideCharToMultiByte
GetLastError
GetTickCount
GlobalAlloc
GetWindowsDirectoryW

shlwapi

StrCatW

rasapi32

RasGetAutodialParamW
RasEnumAutodialAddressesW
RasGetAutodialAddressW

tapi32

lineInitialize
lineGetTranslateCapsW

rasdlg

RasPhonebookDlgW
RasDialDlgW
RasAutodialQueryDlgW

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExW

Sections

.mest
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b50220282345d703c72088dd08a03730

Headers

File Characteristics

Imports

msvcrt

kernel32

shlwapi

rasapi32

tapi32

rasdlg

advapi32

Sections

.mest Size: 57KB - Virtual size: 57KB

.text Size: 271KB - Virtual size: 270KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 58KB - Virtual size: 57KB

.rsrc Size: 49KB - Virtual size: 49KB

.reloc Size: 512B - Virtual size: 316B

.mest
Size: 57KB - Virtual size: 57KB

.text
Size: 271KB - Virtual size: 270KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 58KB - Virtual size: 57KB

.rsrc
Size: 49KB - Virtual size: 49KB

.reloc
Size: 512B - Virtual size: 316B