48c1355fc52b4ef879bfd095be6d6403db0a768699bb008ab874f548baf95985

Sharing

Copy URL Twitter E-mail

General

Target

48c1355fc52b4ef879bfd095be6d6403db0a768699bb008ab874f548baf95985
Size

154KB
MD5

6be5a49c1d064bdee9f8c21ab887c8fa
SHA1

bfaed30e4b07b71fbcf754dfedab2ceac0385e80
SHA256

48c1355fc52b4ef879bfd095be6d6403db0a768699bb008ab874f548baf95985
SHA512

9b4ff9a8f3011d84645b84d20a5c8ece44c07543241446b1b14aadd77d9b3ce09d196512cc68e5c70e69a874e02e473a0962eb7485f04ce627170e97ee4c6e86
SSDEEP

3072:smNOBVlad3xV7Qbv1cBAdapaQxsXQlTsholKEN6:smAl43cZdapeAl4yTN

Score

N/A

Malware Config

Signatures

Files

48c1355fc52b4ef879bfd095be6d6403db0a768699bb008ab874f548baf95985
.dll windows x86

a19a1b3683f3173b3e7c452ed4c91526

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
VirtualAlloc
CreateFileW
LeaveCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
GetCurrentThreadId
SetUnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
SetLastError
LocalFree
FormatMessageA
SetConsoleCtrlHandler
GetLastError
UnhandledExceptionFilter
GetModuleHandleA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
CreateProcessA
SearchPathA
GetStartupInfoA
GetModuleFileNameW
GetShortPathNameW
lstrcatW
lstrlenW
DeleteFileW
WriteFile
CloseHandle
CreateSemaphoreW
GetVersionExW

user32

GetSystemMetrics

gdi32

GetStockObject
GetObjectW
SetTextColor
SetBkMode
CreatePen
SelectObject
Polyline
DeleteObject
CreateFontIndirectW

msvcrt

_except_handler3
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_vsnwprintf
__set_app_type
_controlfp
setlocale
mbstowcs

advapi32

RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
OpenProcessToken

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data24
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data23
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data21
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data20
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data19
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data5
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text14
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text13
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text12
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text5
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a19a1b3683f3173b3e7c452ed4c91526

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

Sections

.text Size: 9KB - Virtual size: 9KB

.data24 Size: 512B - Virtual size: 500B

.data23 Size: 512B - Virtual size: 500B

.data21 Size: 512B - Virtual size: 500B

.data20 Size: 512B - Virtual size: 500B

.data19 Size: 512B - Virtual size: 500B

.data5 Size: 114KB - Virtual size: 114KB

.data Size: 2KB - Virtual size: 2KB

.text14 Size: 512B - Virtual size: 12B

.text13 Size: 512B - Virtual size: 16B

.text12 Size: 512B - Virtual size: 16B

.text6 Size: 1KB - Virtual size: 1KB

.text5 Size: 1KB - Virtual size: 1KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 1024B - Virtual size: 780B

.text
Size: 9KB - Virtual size: 9KB

.data24
Size: 512B - Virtual size: 500B

.data23
Size: 512B - Virtual size: 500B

.data21
Size: 512B - Virtual size: 500B

.data20
Size: 512B - Virtual size: 500B

.data19
Size: 512B - Virtual size: 500B

.data5
Size: 114KB - Virtual size: 114KB

.data
Size: 2KB - Virtual size: 2KB

.text14
Size: 512B - Virtual size: 12B

.text13
Size: 512B - Virtual size: 16B

.text12
Size: 512B - Virtual size: 16B

.text6
Size: 1KB - Virtual size: 1KB

.text5
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 1024B - Virtual size: 780B