848ee3f73d08d0471e15ce6ef3504bc066e17eff4fe4e1ab9d7404002b75fdbe

Sharing

Copy URL Twitter E-mail

General

Target

848ee3f73d08d0471e15ce6ef3504bc066e17eff4fe4e1ab9d7404002b75fdbe
Size

950KB
MD5

f9b2f1595746bed5d927e800e5d82df8
SHA1

4b1de917c424cf5aee72b7423f25a5bdf82a5c05
SHA256

848ee3f73d08d0471e15ce6ef3504bc066e17eff4fe4e1ab9d7404002b75fdbe
SHA512

bdc824450ebe263bf9e3dd430b914a1f029a14c9eaeed81c88bce324086f3fac06ddcea5b11f73e7511fa943bfcf4858184833b7deb0693837083b47e15737f9
SSDEEP

24576:AUDQM4I7ftpJeAGvhl4rVu+YesegShI/0MD93Pkcahn6kcgNfPF7:iRI7ShlGufesegSi5D938ca9JcgN3R

Score

N/A

Malware Config

Signatures

Files

848ee3f73d08d0471e15ce6ef3504bc066e17eff4fe4e1ab9d7404002b75fdbe
.exe windows x86

36110be2903316483f9fc65280a29d01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

opencl

clBuildProgram
clCreateBuffer
clCreateCommandQueue
clCreateContextFromType
clCreateKernel
clCreateProgramWithBinary
clCreateProgramWithSource
clEnqueueNDRangeKernel
clEnqueueReadBuffer
clEnqueueWriteBuffer
clFinish
clGetDeviceIDs
clGetDeviceInfo
clGetPlatformIDs
clGetPlatformInfo
clGetProgramBuildInfo
clGetProgramInfo
clReleaseCommandQueue
clReleaseContext
clReleaseKernel
clReleaseProgram
clSetKernelArg

advapi32

AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup

libcurl-4

curl_easy_cleanup
curl_easy_getinfo
curl_easy_init
curl_easy_perform
curl_easy_reset
curl_easy_setopt
curl_global_cleanup
curl_global_init
curl_slist_append
curl_slist_free_all

kernel32

AllocConsole
AttachConsole
CancelIo
CloseHandle
CreateConsoleScreenBuffer
CreateEventA
CreateFileA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
FormatMessageA
FreeLibrary
GetCommModemStatus
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileType
GetLastError
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetNumberOfConsoleMouseButtons
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetStdHandle
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetVersionExA
InitializeCriticalSection
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenProcess
PeekConsoleInputA
PurgeComm
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
SetCommConfig
SetCommTimeouts
SetConsoleActiveScreenBuffer
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
SetEvent
SetLastError
SetThreadAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepEx
SuspendThread
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleOutputA

msvcrt

_access
_execv
_fdopen
_isatty
_read
_stat
_strdup
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthreadex
_cexit
_close
_endthreadex
_errno
_flsbuf
_ftime
_get_osfhandle
_iob
_isctype
_onexit
_open
_open_osfhandle
_pctype
_setjmp
_setmode
_snprintf
_stricmp
_strnicmp
_vsnprintf
abort
atexit
atof
atoi
bsearch
calloc
exit
exp
fclose
fflush
fgetc
floor
fopen
fputc
fread
free
fseek
ftell
fwrite
getenv
localeconv
localtime
log10
longjmp
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
perror
qsort
raise
realloc
rewind
setlocale
setvbuf
signal
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncat
strncmp
strncpy
strrchr
strstr
strtod
strtok
strtol
time
tolower
toupper
vfprintf
wcslen
wcstombs

winmm

timeBeginPeriod
timeEndPeriod

ws2_32

WSAGetLastError
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Sections

.text
Size: 722KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 171KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

36110be2903316483f9fc65280a29d01

Headers

File Characteristics

Imports

opencl

advapi32

libcurl-4

kernel32

msvcrt

winmm

ws2_32

Sections

.text Size: 722KB - Virtual size: 721KB

.data Size: 11KB - Virtual size: 10KB

.rdata Size: 115KB - Virtual size: 114KB

/4 Size: 93KB - Virtual size: 92KB

.bss Size: - Virtual size: 171KB

.idata Size: 7KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 32B

.tls Size: 512B - Virtual size: 32B

.text
Size: 722KB - Virtual size: 721KB

.data
Size: 11KB - Virtual size: 10KB

.rdata
Size: 115KB - Virtual size: 114KB

/4
Size: 93KB - Virtual size: 92KB

.bss
Size: - Virtual size: 171KB

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 32B

.tls
Size: 512B - Virtual size: 32B