48c115fa39c0a68d3d4a557492eaef1d09c5b23fa065e490b4334f0f06d53620

Sharing

Copy URL Twitter E-mail

General

Target

48c115fa39c0a68d3d4a557492eaef1d09c5b23fa065e490b4334f0f06d53620
Size

125KB
MD5

59ac23105896a7e5dc7449f5e2b02c40
SHA1

07ec662018fbba013718a25654ad342166220317
SHA256

48c115fa39c0a68d3d4a557492eaef1d09c5b23fa065e490b4334f0f06d53620
SHA512

406f2449e0b50c61ce78c38690a277af2cb30457f7b105eafdd37da7a0316c3c6c513af35fb40c5804dd26afec7132ed689c3192267eef2008b7b75982b16187
SSDEEP

3072:4eBmjwvZ1DXHOGs1wuq/JSQ8up/YVtgprvjfF:4eB7zOGJuCJSDM/YPszjN

Score

N/A

Malware Config

Signatures

Files

48c115fa39c0a68d3d4a557492eaef1d09c5b23fa065e490b4334f0f06d53620
.exe windows x86

30bdf2898467a8e90b06f7b6dd96fd14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UnionRect
SystemParametersInfoA
SetMenuDefaultItem
PackDDElParam
TrackMouseEvent
GetMessageTime
EnumWindows
CheckMenuRadioItem
ScrollDC
SendMessageCallbackW

shell32

DragQueryFileW
DoEnvironmentSubstW
ExtractIconA
Shell_NotifyIconA
DuplicateIcon
ExtractAssociatedIconA
ExtractIconExW

gdi32

AddFontResourceExW
AddFontMemResourceEx
CreateColorSpaceA
AbortDoc
CloseMetaFile

mpr

WNetGetProviderNameW
WNetDisconnectDialog
WNetGetLastErrorW
WNetEnumResourceW
WNetGetProviderNameA

kernel32

HeapReAlloc
HeapAlloc
LoadLibraryW
HeapFree
CreateFileW
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
SetFilePointer
MultiByteToWideChar
CloseHandle
GetStringTypeW
LCMapStringW
HeapSize
IsValidCodePage
GetFileType
WriteConsoleW
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
LocalFlags
GetCPInfoExW
CreateRemoteThread
VirtualFree
GetCommProperties
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetLastError
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
DeleteCriticalSection
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30bdf2898467a8e90b06f7b6dd96fd14

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

gdi32

mpr

kernel32

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 16KB

.rsrc Size: 86KB - Virtual size: 86KB

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 16KB

.rsrc
Size: 86KB - Virtual size: 86KB