c46151286fac3091576d9546a36f7236109896bf098ff52f0386270d00e90871

Sharing

Copy URL Twitter E-mail

General

Target

c46151286fac3091576d9546a36f7236109896bf098ff52f0386270d00e90871
Size

279KB
MD5

74f3b7ac60f0e15778a06a6335498cc4
SHA1

223d1181c6ff1ef59095e7bcd5cb1843ca0a949f
SHA256

c46151286fac3091576d9546a36f7236109896bf098ff52f0386270d00e90871
SHA512

847533f72694c9dc28e83928a1e40e1112562fb04da73aeb6671bb2964131c84ca3947729be792f087905e0a1942e693d30209cd9c2794283a142590d910ba09
SSDEEP

6144:KQygN6pN3upp4jIHq4+THn8pwqkRXes/pBt3ooo5iIxF:KjgqBQpKIHq4cc+f7Yb5FT

Score

N/A

Malware Config

Signatures

Files

c46151286fac3091576d9546a36f7236109896bf098ff52f0386270d00e90871
.exe windows x86

53f74a69b3041791ae23c53b4313fa0d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoImpersonateClient
CoRevertToSelf
CoCreateInstance

kernel32

LockResource
IsDebuggerPresent
SetThreadLocale
HeapDestroy
GetSystemTimeAsFileTime
HeapAlloc
LeaveCriticalSection
RaiseException
HeapSize
EnterCriticalSection
LoadResource
GetACP
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SizeofResource
FindResourceExW
DeleteCriticalSection
GetProcessHeap
GetCurrentThreadId
FormatMessageW
lstrlenW
FindResourceW
GetThreadLocale
CloseHandle
HeapFree
VirtualAlloc

user32

UnregisterClassA
wsprintfW

userenv

UnloadUserProfile

oleaut32

VariantClear
SysAllocStringLen
SafeArrayCopy
SysStringLen
VarBstrCmp
SafeArrayUnlock
SafeArrayGetUBound
LoadRegTypeLi
VariantInit
SafeArrayCreate
SafeArrayGetVartype
SysFreeString
SysAllocString
SafeArrayDestroy
SafeArrayLock
SafeArrayRedim
SafeArrayGetLBound
LoadTypeLi
VarBstrCat
SysStringByteLen
VariantCopy
VariantCopyInd
SysAllocStringByteLen

advapi32

IsValidSid
OpenProcessToken
EqualSid
CopySid
ConvertStringSidToSidW
OpenThreadToken
GetLengthSid
LookupAccountSidW
GetTokenInformation

iphlpapi

GetTcpTable
GetUdpTable
InternalCreateIpNetEntry
GetAdaptersAddresses
SetIpNetEntry
GetBestRoute
GetTcpStatisticsEx
GetInterfaceInfo
IpRenewAddress

msvidc32

DriverProc

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 250KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53f74a69b3041791ae23c53b4313fa0d

Headers

File Characteristics

Imports

ole32

kernel32

user32

userenv

oleaut32

advapi32

iphlpapi

msvidc32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 250KB - Virtual size: 1.0MB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 250KB - Virtual size: 1.0MB

.rsrc
Size: 512B - Virtual size: 4KB