48f51c9c99847e08128465e8400a8ff6c31e6ffd676852621a244a7f1983a9df

Sharing

Copy URL Twitter E-mail

General

Target

48f51c9c99847e08128465e8400a8ff6c31e6ffd676852621a244a7f1983a9df
Size

560KB
MD5

1acdfed15405bfef9c7a1590ebbd89e0
SHA1

a3b9e83c0defd6194d2c9d62f2ed920791a4f1c7
SHA256

48f51c9c99847e08128465e8400a8ff6c31e6ffd676852621a244a7f1983a9df
SHA512

105c2c2c8f9c22696ba47efab4cf13148a35e80c8eb7d7bc398749a9a4671f2fa430d8d9cd680779c692e79cf52e3cede11b8f3639332b402fe682988c21f8e9
SSDEEP

6144:xjwmPvHszW2uMcLr+K6K6Rn2JFKrheWxJlHmdg9eK:/3szcqKBFKxJlH

Score

N/A

Malware Config

Signatures

Files

48f51c9c99847e08128465e8400a8ff6c31e6ffd676852621a244a7f1983a9df
.dll windows x86

810a9c0b295038789acbc83f950cde35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
CreateEventW
WaitForSingleObject
CloseHandle
SetEvent
ResetEvent
LocalFree
GetProcAddress
FreeLibrary
InterlockedExchange
GetLastError
LoadLibraryA
RaiseException
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
TryEnterCriticalSection
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapReAlloc
GetModuleHandleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
HeapSize
ExitProcess
FatalAppExitA
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA

apex_release

NiGetApexSDK
NxGetApexSDK
NxGetApexAllocator

Exports

Exports

createModule

Sections

.text
Size: 380KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

810a9c0b295038789acbc83f950cde35

Headers

File Characteristics

Imports

kernel32

apex_release

Exports

Exports

Sections

.text Size: 380KB - Virtual size: 378KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 16KB - Virtual size: 85KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 24KB - Virtual size: 22KB

.rmnet Size: 56KB - Virtual size: 56KB

.text
Size: 380KB - Virtual size: 378KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 16KB - Virtual size: 85KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 24KB - Virtual size: 22KB

.rmnet
Size: 56KB - Virtual size: 56KB