b4d0a4097189f2c208c40b2808290a3003f5f1f3ff4756f2d24a2eb8b18d60df

Sharing

Copy URL

Twitter E-mail

General

Target

b4d0a4097189f2c208c40b2808290a3003f5f1f3ff4756f2d24a2eb8b18d60df
Size

168KB
MD5

4f48e7fb500fa1c4b97bca7f7f59a916
SHA1

2ce9f6ac575e6f4bd5165b69e825c6d3acbb6deb
SHA256

b4d0a4097189f2c208c40b2808290a3003f5f1f3ff4756f2d24a2eb8b18d60df
SHA512

57363314ec77ffe92eb5f18534953e62e1c1dada28dc2355338f83db379b5f7aeea7822c6a86440bc890ed2d62715b1003abb243b602c8d483b38e3560a4663e
SSDEEP

3072:06Nt+nzwyPzr6CXPawfF3J+1PkB4PU0RKucNkDKAF7Z:NNKzdPzGCXPawN+PxguikKAFN

Score

N/A

Malware Config

Signatures

Files

b4d0a4097189f2c208c40b2808290a3003f5f1f3ff4756f2d24a2eb8b18d60df
.exe windows x86

50ac550b04bcdb58f70bd96a65e58a24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragQueryFileW
ShellExecuteExA
DragFinish
DoEnvironmentSubstW
DragQueryPoint
DragAcceptFiles
ExtractIconA

ole32

CreatePointerMoniker
CoRevertToSelf
CoGetMalloc
CoMarshalInterface
OleConvertOLESTREAMToIStorage
GetConvertStg
CoFileTimeToDosDateTime

advapi32

SetSecurityDescriptorDacl
AddAccessDeniedAce
NotifyChangeEventLog
LookupPrivilegeDisplayNameA
ChangeServiceConfigW
ClearEventLogW
AllocateAndInitializeSid

kernel32

GetStringTypeW
LCMapStringW
ReadFile
CreateFileW
SetFilePointer
MultiByteToWideChar
WriteConsoleW
CloseHandle
CompareStringW
SetEnvironmentVariableA
SetStdHandle
ExitProcess
GetFileAttributesExA
IsValidCodePage
SetConsoleCursorPosition
GetWindowsDirectoryA
WriteConsoleOutputW
VerifyVersionInfoW
EnterCriticalSection
LeaveCriticalSection
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
Sleep
GetLastError
HeapFree
GetProcAddress
GetModuleHandleW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WideCharToMultiByte
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapAlloc
HeapReAlloc
LoadLibraryW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
IsProcessorFeaturePresent
HeapSize

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jmnqpto
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

50ac550b04bcdb58f70bd96a65e58a24

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

advapi32

kernel32

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 93KB - Virtual size: 121KB

jmnqpto Size: - Virtual size: 4KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 93KB - Virtual size: 121KB

jmnqpto
Size: - Virtual size: 4KB