2a483146b8333a3fe716fa04a31773177847b4294e64503c4232955bd1a9c233

Sharing

Copy URL Twitter E-mail

General

Target

2a483146b8333a3fe716fa04a31773177847b4294e64503c4232955bd1a9c233
Size

1.3MB
MD5

23696da0f0909969392495d5eceeda02
SHA1

4f2876a3a2977750a2b99bea61f84b41975f4384
SHA256

2a483146b8333a3fe716fa04a31773177847b4294e64503c4232955bd1a9c233
SHA512

a7405d8ed59551027244fba16788c5a8e01885cc42ceb4db8556a3be4341f79f5f687aaebbc0e865c99f0aa142b7aaa977c044a15e4a5fd25ec3921837e02c87
SSDEEP

24576:2/D1guoQFwpzQJV/JhBFtKnXSCZD1o8DbfK8JIVCNiULEAcQ:2/DOuXapslJp0XSCRCGfVKYlJ

Score

N/A

Malware Config

Signatures

Files

2a483146b8333a3fe716fa04a31773177847b4294e64503c4232955bd1a9c233
.dll windows x86

dd4f9f5e14b212917a097b0ff479dc51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetTickCount
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

ShowOwnedPopups

advapi32

RegCloseKey

oleaut32

SafeArrayGetLBound

version

GetFileVersionInfoA

gdi32

IntersectClipRect

ole32

OleInitialize

comctl32

ImageList_GetIconSize

wsock32

WSAAsyncSelect

netapi32

Netbios

Exports

Exports

tom

Sections

CODE
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 61B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp1
Size: - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp2
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd4f9f5e14b212917a097b0ff479dc51

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

wsock32

netapi32

Exports

Exports

Sections

CODE Size: - Virtual size: 360KB

DATA Size: - Virtual size: 4KB

BSS Size: - Virtual size: 3KB

.idata Size: - Virtual size: 8KB

.edata Size: - Virtual size: 61B

.vmp0 Size: - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 492KB

.vmp1 Size: - Virtual size: 766KB

.vmp2 Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 512B - Virtual size: 176B

CODE
Size: - Virtual size: 360KB

DATA
Size: - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: - Virtual size: 8KB

.edata
Size: - Virtual size: 61B

.vmp0
Size: - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 492KB

.vmp1
Size: - Virtual size: 766KB

.vmp2
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 512B - Virtual size: 176B