47b0464f64fb6e97e00790b9c71d4b87383713564dda9c245269c9f4ef7d48eb

Sharing

Copy URL Twitter E-mail

General

Target

47b0464f64fb6e97e00790b9c71d4b87383713564dda9c245269c9f4ef7d48eb
Size

124KB
MD5

17e03f723a2cb9b1a7c04e4df3ecbd40
SHA1

0dcb993c4ecc258c7fdcca48697b20dc8e384740
SHA256

47b0464f64fb6e97e00790b9c71d4b87383713564dda9c245269c9f4ef7d48eb
SHA512

a2cef92b8af31f377fae055e9bc461db1d8a5da65a73297bc01d82f32a149aaf737698ddebe49372cbf9efd82b6aee7834d02aabd8d48d43e4ebb4c659e3dc4c
SSDEEP

1536:cJSzyovAtwgagyoh+2B8ir8LiD6K/aMUmlaCyrty8nrehJ8TwrIGO:cJSz4tRaQELip/iznrty8nre38szO

Score

N/A

Malware Config

Signatures

Files

47b0464f64fb6e97e00790b9c71d4b87383713564dda9c245269c9f4ef7d48eb
.dll windows x86

6851ef13e255af1c2b27ebe16558f9a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ConvertSDToStringSDRootDomainW
ClearEventLogA

kernel32

GetCommandLineW
VirtualAlloc
FreeLibrary
GetProcAddress
InterlockedCompareExchange
InterlockedExchange
LoadLibraryA
LoadLibraryW
RemoveDirectoryW
Sleep
LoadResource
FindResourceA
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
SetEnvironmentVariableA

ole32

CoCreateInstanceEx
HPALETTE_UserUnmarshal

rpcrt4

NdrServerContextNewMarshall

user32

InflateRect
SendDlgItemMessageW
GetKeyState

Exports

Exports

KGRBI

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6851ef13e255af1c2b27ebe16558f9a4

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

rpcrt4

user32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 28KB - Virtual size: 29KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 28KB - Virtual size: 29KB

.reloc
Size: 4KB - Virtual size: 3KB