f4f666e185ed7d845fee38520cc1d5f0a9e974c50b8a43a4b814913ede0980a2

Sharing

Copy URL Twitter E-mail

General

Target

f4f666e185ed7d845fee38520cc1d5f0a9e974c50b8a43a4b814913ede0980a2
Size

140KB
MD5

a1f1ed9da9979d1026d8e9af1f60f490
SHA1

96f195631a6a6321cc93b60d35ffbd778604db8e
SHA256

f4f666e185ed7d845fee38520cc1d5f0a9e974c50b8a43a4b814913ede0980a2
SHA512

cf1e87d90151b55b3246c6aa4747e23eb3c4e78aad9829d4b69c03e2b72b1195b3be16899f7dfb2df3bcd7e453b08d8d948c7ccc06a6192f8be8043354fd51e9
SSDEEP

3072:pZUBXEK8HgU8pCTtSWjob06ofcq55lZ986ul89Ves9iHKCnT:pZUBELHglCZSbTo755lOl8f+1T

Score

N/A

Malware Config

Signatures

Files

f4f666e185ed7d845fee38520cc1d5f0a9e974c50b8a43a4b814913ede0980a2
.exe windows x86

823f83b6886044957e78aba7fd8a1c31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fscanf
__p__wpgmptr
__p__winminor
_lfind
_Getdays
__set_app_type
scanf
_getdrive
__p__commode
_mbsnbicoll
_mbspbrk
_statusfp
_commit
wcstol
div
_wunlink
_vscwprintf
_wexeclpe
gets
mbstowcs
_fpieee_flt
ungetwc
__p__daylight
_ismbclower
__getmainargs
_wtof
??0__non_rtti_object@@QAE@PBD@Z
exit
_tzname
localtime
fclose
_pgmptr
wcscspn
atexit
_ismbcalnum
_rmdir
__pioinfo
wcspbrk
_ungetch
wcscoll
_set_error_mode
__setusermatherr
towupper
strlen
_strncoll

kernel32

GetLocaleInfoA
TzSpecificLocalTimeToSystemTime
GetEnvironmentStringsA
LocalHandle
DosDateTimeToFileTime
GlobalCompact
GetUserDefaultUILanguage
InitAtomTable
FreeEnvironmentStringsA
GetThreadPriority
GetLastError
WriteFileEx
OpenJobObjectW
GetCurrentThread
LoadLibraryW
WaitForMultipleObjectsEx
GetExitCodeThread

msasn1

ASN1BERDecCheck
ASN1ztcharstring_cmp
ASN1DecAlloc
ASN1BERDecEndOfContents
ASN1BEREncSX
ASN1CEREncUTCTime
ASN1BEREncChar32String
ASN1intx_free
ASN1intx_sub
ASN1bitstring_cmp
ASN1BERDecNotEndOfContents
ASN1BERDecSkip
ASN1BERDecZeroChar32String
ASN1open_free
ASN1BEREncCharString
ASN1_CreateModule
ASN1BERDecBitString2
ASN1BERDecObjectIdentifier2
ASN1BEREncChar16String
ASN1BEREncExplicitTag
ASN1BERDecS8Val
ASN1generalizedtime_cmp
ASN1CEREncChar32String
ASN1BEREncObjectIdentifier
ASN1Free

sqlunirl

_GetTempFileName_@16
_GetFileTitle@12
_GetShortPathName_@12
_CreateDC_@16
_GetServiceKeyName_@16
_CharLowerBuff_@8
_CreatePropertySheetPage_@4
_CharPrev_@8
__lcreat_@8
_InitiateSystemShutdown_@20
_GetProp@8
_CreateMetaFile_@4
_OemToCharBuff_@12
_ExpandEnvironmentStrings_@12
_lstrcat_@8
_FindAtom_@4
_BuildCommDCB_@8
_ShellExecuteEx_@4
_RemoveProp@8
_GetEnhMetaFile_@4
_PolyTextOut_@12
_RegisterServiceCtrlHandler_@8
_OpenMutex_@12
_WriteProfileString_@12
_CreateProcess_@40
_NDdeSetTrustedShare_@12
_ObjectPrivilegeAuditAlarm_@24
_SetDefaultCommConfig_@12

ir50_qcx

DllMain
AllocInstanceData
FreeInstanceData
Compress
CompressBegin
SetScalability
SetCPUID
CompressQuery
CompressFramesInfo
CompressEnd

user32

EndDialog

iccvid

DriverProc

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

823f83b6886044957e78aba7fd8a1c31

Headers

File Characteristics

Imports

msvcrt

kernel32

msasn1

sqlunirl

ir50_qcx

user32

iccvid

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 512B - Virtual size: 256B

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 512B - Virtual size: 256B

.rsrc
Size: 6KB - Virtual size: 6KB