49dab33dd5b4d29f41a5ddf329d1ed92a567463e4cdeaa948616a7fe65e88728

Sharing

Copy URL Twitter E-mail

General

Target

49dab33dd5b4d29f41a5ddf329d1ed92a567463e4cdeaa948616a7fe65e88728
Size

238KB
MD5

bd90896b8c520a19327204c91d6475c5
SHA1

da5090f4c646481b4a17a09f19ac1c6d60b6b311
SHA256

49dab33dd5b4d29f41a5ddf329d1ed92a567463e4cdeaa948616a7fe65e88728
SHA512

00573c37b75d25b77ed082dcdc423f90afa345d6349759cfdb1acdab7ddfec8dcbb49409bc823b5b5f96459ac3595af14013692c266b74a5535e70b83f9366ea
SSDEEP

3072:hZOuI5hkjD8wpgoolUPixTSV7rxXVulSFfEZ6I/mdprXWxg6OLYjg+faZhhZrpR:+uF3uozykNVgSFfEYAsX2LiYjHaB1v

Score

N/A

Malware Config

Signatures

Files

49dab33dd5b4d29f41a5ddf329d1ed92a567463e4cdeaa948616a7fe65e88728
.exe windows x86

bf6d2f8928a015c7ae577b83873c6440

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateToolbarEx
ord5
InitCommonControlsEx
ord15
ord4
CreatePropertySheetPageA
ord2
InitializeFlatSB
ord13
ord3
ord17
PropertySheetA
ord6

shlwapi

StrCSpnA
StrCmpNA

kernel32

Sleep
VirtualAlloc
ExitProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStringTypeW
HeapAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent

cryptui

CryptUIWizExport
CryptUIDlgViewContext
CryptUIWizDigitalSign
CryptUIWizImport

setupapi

SetupDiCreateDevRegKeyW
SetupCommitFileQueueA
SetupPromptForDiskW
SetupQueueDefaultCopyA

Sections

.mncviee
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.drhfgf
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf6d2f8928a015c7ae577b83873c6440

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

kernel32

cryptui

setupapi

Sections

.mncviee Size: 24KB - Virtual size: 24KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 30KB

.drhfgf Size: 200KB - Virtual size: 200KB

.rsrc Size: 512B - Virtual size: 16B

.mncviee
Size: 24KB - Virtual size: 24KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 30KB

.drhfgf
Size: 200KB - Virtual size: 200KB

.rsrc
Size: 512B - Virtual size: 16B