48daa7033c5ec893ebf5a71fa4fb5987ebb0fd2aca0668d37403a4dbe739e179

Sharing

Copy URL Twitter E-mail

General

Target

48daa7033c5ec893ebf5a71fa4fb5987ebb0fd2aca0668d37403a4dbe739e179
Size

276KB
MD5

e4b7770cf0dadd562a0907a4507f1785
SHA1

a03ec8b8478c92d624bb8d373ddec6931f21edba
SHA256

48daa7033c5ec893ebf5a71fa4fb5987ebb0fd2aca0668d37403a4dbe739e179
SHA512

7e6a144355c24be15e894bdf85540ae783f63e0fbfa3fc351821522671fbd813baaa47ce0bc447af4af2a6a8589fab67c8f0e65ed9eea9efabd37fa3b8a225bf
SSDEEP

6144:vS/8blfrNe/m98ixGx1TDnhpzKrHnbGiVyZF3/CAWEeWp:vS/8btrisYTDnh9K8WP0

Score

N/A

Malware Config

Signatures

Files

48daa7033c5ec893ebf5a71fa4fb5987ebb0fd2aca0668d37403a4dbe739e179
.exe windows x86

41d29e2cbf9a957289b64789f79c1a0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConnectNamedPipe
lstrlenA
OutputDebugStringA
IsBadWritePtr
IsBadStringPtrA
IsBadReadPtr
GetVersionExA
GetTickCount
GetSystemInfo
GetStartupInfoA
GetLocalTime
GetHandleInformation
GetFileTime
GetFileSize
GetCurrentThreadId
GetComputerNameA
GetCommandLineA
GetACP
FreeLibrary
LoadLibraryA
lstrcpynA
lstrcmpiA
lstrcmpA
lstrcpyA
lstrcatA
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetTimeZoneInformation
GetTimeZoneInformation
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
InterlockedIncrement
GlobalUnlock
SetEvent
GlobalReAlloc
ExitThread
ExitProcess
CreateThread
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
DeleteAtom
AddAtomA
GetWindowsDirectoryA
DeleteFileA
SetFilePointer
FlushFileBuffers
CloseHandle
CreateFileA
CopyFileA
WaitForSingleObjectEx
WaitForSingleObject
SetThreadPriority
ResetEvent
OpenEventA
MoveFileA
HeapReAlloc
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetCurrentProcessId
GetModuleHandleA
GetSystemTimeAdjustment
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
VirtualAlloc
GetOEMCP
GetCPInfo
DisconnectNamedPipe
CreateEventA
CreateNamedPipeA
WaitForMultipleObjects
GetOverlappedResult
ReadFile
GetLastError
WriteFile
HeapFree
GetProcessHeap
GlobalLock
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetProcAddress
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetStringTypeW

user32

KillTimer
MessageBoxA
SetTimer
wsprintfA
GetParent
GetWindowTextLengthA

advapi32

FreeSid
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegNotifyChangeKeyValue
AllocateAndInitializeSid

shell32

CommandLineToArgvW

ole32

CoUninitialize
CoInitialize
OleRun
CoGetMalloc

Sections

.code
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 244KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

41d29e2cbf9a957289b64789f79c1a0e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

Sections

.code Size: 8KB - Virtual size: 4KB

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 244KB - Virtual size: 2.2MB

.code
Size: 8KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 244KB - Virtual size: 2.2MB