4fbd9e1b20b2cf910b7585f1306ad2aa635317759efdcb1cf3bc17bcf25f475c

Sharing

Copy URL Twitter E-mail

General

Target

4fbd9e1b20b2cf910b7585f1306ad2aa635317759efdcb1cf3bc17bcf25f475c
Size

1.4MB
MD5

b0fff27dd6b6a5f5ccd54b2bacce2ed6
SHA1

32180ce1fe180f944b71b912012223b5654ebcf1
SHA256

4fbd9e1b20b2cf910b7585f1306ad2aa635317759efdcb1cf3bc17bcf25f475c
SHA512

4c5c2f4feb4b0efca0b6edcf33cf272bc7a293a66e4ae20a2d1b9e797c52806de41ee974e37b1061ccd32cee63cdb3e17905f566c2688addd7266fb2e09cbb92
SSDEEP

24576:JuMha8DXdBbiaZjaISdrupZV2dduK1BgaL3M+UCLLItECza1OS+XEZJAwvsAO:/Y8DPbt8Rk2rzG2M+UCPkEAtS+0Ze

Score

N/A

Malware Config

Signatures

Files

4fbd9e1b20b2cf910b7585f1306ad2aa635317759efdcb1cf3bc17bcf25f475c
.exe windows x86

e870fe1274cfcf376c3376dcdff2a01f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

winmm

midiStreamOpen

ws2_32

closesocket

rasapi32

RasHangUpA

kernel32

GetOEMCP
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

CopyAcceleratorTableA

gdi32

GetDIBits

winspool.drv

DocumentPropertiesA

advapi32

RegOpenKeyExA

shell32

DragQueryFileA

ole32

OleInitialize

oleaut32

SafeArrayGetElement

comctl32

ImageList_Read

oledlg

ord8

wininet

InternetReadFile

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 777KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e870fe1274cfcf376c3376dcdff2a01f

Headers

File Characteristics

Imports

iphlpapi

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

comdlg32

Sections

.text Size: - Virtual size: 777KB

.rdata Size: - Virtual size: 266KB

.data Size: - Virtual size: 380KB

.rsrc Size: 20KB - Virtual size: 33KB

.vmp0 Size: - Virtual size: 300KB

.vmp0 Size: - Virtual size: 20KB

.vmp0 Size: - Virtual size: 434KB

.vmp1 Size: 1.4MB - Virtual size: 1.4MB

.text
Size: - Virtual size: 777KB

.rdata
Size: - Virtual size: 266KB

.data
Size: - Virtual size: 380KB

.rsrc
Size: 20KB - Virtual size: 33KB

.vmp0
Size: - Virtual size: 300KB

.vmp0
Size: - Virtual size: 20KB

.vmp0
Size: - Virtual size: 434KB

.vmp1
Size: 1.4MB - Virtual size: 1.4MB