8144b204dc538658d72e49dfe7aa913ca153f75e9bc6594fbe71640f4305d3f6

Sharing

Copy URL Twitter E-mail

General

Target

8144b204dc538658d72e49dfe7aa913ca153f75e9bc6594fbe71640f4305d3f6
Size

140KB
MD5

479ecc5d7fd0ef6b753dd1d4979a85a5
SHA1

3b142f54d0e70721327ae1d34c4b438aaea7b41b
SHA256

8144b204dc538658d72e49dfe7aa913ca153f75e9bc6594fbe71640f4305d3f6
SHA512

341531f9e1ae80d52bac52fd6e7b6744130d8c454e90ce268b408517ba3484216eff3ec2d145ccb1da408b47a1969dfe68347598b0a6101d714cdc932606e91b
SSDEEP

3072:pZUBXEK8HgU8pCTtSWjob06ofcq55lZ986ul89Ves9iHKCn0h:pZUBELHglCZSbTo755lOl8f+1U

Score

N/A

Malware Config

Signatures

Files

8144b204dc538658d72e49dfe7aa913ca153f75e9bc6594fbe71640f4305d3f6
.exe windows x86

823f83b6886044957e78aba7fd8a1c31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fscanf
__p__wpgmptr
__p__winminor
_lfind
_Getdays
__set_app_type
scanf
_getdrive
__p__commode
_mbsnbicoll
_mbspbrk
_statusfp
_commit
wcstol
div
_wunlink
_vscwprintf
_wexeclpe
gets
mbstowcs
_fpieee_flt
ungetwc
__p__daylight
_ismbclower
__getmainargs
_wtof
??0__non_rtti_object@@QAE@PBD@Z
exit
_tzname
localtime
fclose
_pgmptr
wcscspn
atexit
_ismbcalnum
_rmdir
__pioinfo
wcspbrk
_ungetch
wcscoll
_set_error_mode
__setusermatherr
towupper
strlen
_strncoll

kernel32

GetLocaleInfoA
TzSpecificLocalTimeToSystemTime
GetEnvironmentStringsA
LocalHandle
DosDateTimeToFileTime
GlobalCompact
GetUserDefaultUILanguage
InitAtomTable
FreeEnvironmentStringsA
GetThreadPriority
GetLastError
WriteFileEx
OpenJobObjectW
GetCurrentThread
LoadLibraryW
WaitForMultipleObjectsEx
GetExitCodeThread

msasn1

ASN1BERDecCheck
ASN1ztcharstring_cmp
ASN1DecAlloc
ASN1BERDecEndOfContents
ASN1BEREncSX
ASN1CEREncUTCTime
ASN1BEREncChar32String
ASN1intx_free
ASN1intx_sub
ASN1bitstring_cmp
ASN1BERDecNotEndOfContents
ASN1BERDecSkip
ASN1BERDecZeroChar32String
ASN1open_free
ASN1BEREncCharString
ASN1_CreateModule
ASN1BERDecBitString2
ASN1BERDecObjectIdentifier2
ASN1BEREncChar16String
ASN1BEREncExplicitTag
ASN1BERDecS8Val
ASN1generalizedtime_cmp
ASN1CEREncChar32String
ASN1BEREncObjectIdentifier
ASN1Free

sqlunirl

_GetTempFileName_@16
_GetFileTitle@12
_GetShortPathName_@12
_CreateDC_@16
_GetServiceKeyName_@16
_CharLowerBuff_@8
_CreatePropertySheetPage_@4
_CharPrev_@8
__lcreat_@8
_InitiateSystemShutdown_@20
_GetProp@8
_CreateMetaFile_@4
_OemToCharBuff_@12
_ExpandEnvironmentStrings_@12
_lstrcat_@8
_FindAtom_@4
_BuildCommDCB_@8
_ShellExecuteEx_@4
_RemoveProp@8
_GetEnhMetaFile_@4
_PolyTextOut_@12
_RegisterServiceCtrlHandler_@8
_OpenMutex_@12
_WriteProfileString_@12
_CreateProcess_@40
_NDdeSetTrustedShare_@12
_ObjectPrivilegeAuditAlarm_@24
_SetDefaultCommConfig_@12

ir50_qcx

DllMain
AllocInstanceData
FreeInstanceData
Compress
CompressBegin
SetScalability
SetCPUID
CompressQuery
CompressFramesInfo
CompressEnd

user32

EndDialog

iccvid

DriverProc

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

823f83b6886044957e78aba7fd8a1c31

Headers

File Characteristics

Imports

msvcrt

kernel32

msasn1

sqlunirl

ir50_qcx

user32

iccvid

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 512B - Virtual size: 256B

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 512B - Virtual size: 256B

.rsrc
Size: 6KB - Virtual size: 6KB