e5e04c86c57dcf6a21aa479a6e761d77486e1128c103033a6715362c0ef675d2

Sharing

Copy URL Twitter E-mail

General

Target

e5e04c86c57dcf6a21aa479a6e761d77486e1128c103033a6715362c0ef675d2
Size

140KB
MD5

1fe6ac541035a42772f36085f561b64b
SHA1

04c5a5b54b6796b2efa7ff179debdc5ce998ea07
SHA256

e5e04c86c57dcf6a21aa479a6e761d77486e1128c103033a6715362c0ef675d2
SHA512

da87bf5ee0c9cd7db43d94801420975b9f3ab8dc63f127f16e0a019bef94d1edaba4907190fb759f0262123650d6883fa463908dc95cb496c962c66fa4fcd3fe
SSDEEP

3072:pZUBXEK8HgU8pCTtSWjob06ofcq55lZ986ul89Ves9iHKCnc:pZUBELHglCZSbTo755lOl8f+1c

Score

N/A

Malware Config

Signatures

Files

e5e04c86c57dcf6a21aa479a6e761d77486e1128c103033a6715362c0ef675d2
.exe windows x86

823f83b6886044957e78aba7fd8a1c31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fscanf
__p__wpgmptr
__p__winminor
_lfind
_Getdays
__set_app_type
scanf
_getdrive
__p__commode
_mbsnbicoll
_mbspbrk
_statusfp
_commit
wcstol
div
_wunlink
_vscwprintf
_wexeclpe
gets
mbstowcs
_fpieee_flt
ungetwc
__p__daylight
_ismbclower
__getmainargs
_wtof
??0__non_rtti_object@@QAE@PBD@Z
exit
_tzname
localtime
fclose
_pgmptr
wcscspn
atexit
_ismbcalnum
_rmdir
__pioinfo
wcspbrk
_ungetch
wcscoll
_set_error_mode
__setusermatherr
towupper
strlen
_strncoll

kernel32

GetLocaleInfoA
TzSpecificLocalTimeToSystemTime
GetEnvironmentStringsA
LocalHandle
DosDateTimeToFileTime
GlobalCompact
GetUserDefaultUILanguage
InitAtomTable
FreeEnvironmentStringsA
GetThreadPriority
GetLastError
WriteFileEx
OpenJobObjectW
GetCurrentThread
LoadLibraryW
WaitForMultipleObjectsEx
GetExitCodeThread

msasn1

ASN1BERDecCheck
ASN1ztcharstring_cmp
ASN1DecAlloc
ASN1BERDecEndOfContents
ASN1BEREncSX
ASN1CEREncUTCTime
ASN1BEREncChar32String
ASN1intx_free
ASN1intx_sub
ASN1bitstring_cmp
ASN1BERDecNotEndOfContents
ASN1BERDecSkip
ASN1BERDecZeroChar32String
ASN1open_free
ASN1BEREncCharString
ASN1_CreateModule
ASN1BERDecBitString2
ASN1BERDecObjectIdentifier2
ASN1BEREncChar16String
ASN1BEREncExplicitTag
ASN1BERDecS8Val
ASN1generalizedtime_cmp
ASN1CEREncChar32String
ASN1BEREncObjectIdentifier
ASN1Free

sqlunirl

_GetTempFileName_@16
_GetFileTitle@12
_GetShortPathName_@12
_CreateDC_@16
_GetServiceKeyName_@16
_CharLowerBuff_@8
_CreatePropertySheetPage_@4
_CharPrev_@8
__lcreat_@8
_InitiateSystemShutdown_@20
_GetProp@8
_CreateMetaFile_@4
_OemToCharBuff_@12
_ExpandEnvironmentStrings_@12
_lstrcat_@8
_FindAtom_@4
_BuildCommDCB_@8
_ShellExecuteEx_@4
_RemoveProp@8
_GetEnhMetaFile_@4
_PolyTextOut_@12
_RegisterServiceCtrlHandler_@8
_OpenMutex_@12
_WriteProfileString_@12
_CreateProcess_@40
_NDdeSetTrustedShare_@12
_ObjectPrivilegeAuditAlarm_@24
_SetDefaultCommConfig_@12

ir50_qcx

DllMain
AllocInstanceData
FreeInstanceData
Compress
CompressBegin
SetScalability
SetCPUID
CompressQuery
CompressFramesInfo
CompressEnd

user32

EndDialog

iccvid

DriverProc

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

823f83b6886044957e78aba7fd8a1c31

Headers

File Characteristics

Imports

msvcrt

kernel32

msasn1

sqlunirl

ir50_qcx

user32

iccvid

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 512B - Virtual size: 256B

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 512B - Virtual size: 256B

.rsrc
Size: 6KB - Virtual size: 6KB