a48fcd0255d2815a5853eacf6986db66e0fb9b88e56c3cc27721ab676390e1e6

Sharing

Copy URL Twitter E-mail

General

Target

a48fcd0255d2815a5853eacf6986db66e0fb9b88e56c3cc27721ab676390e1e6
Size

52KB
MD5

288b9333a93c5ee9247bf48a8c834f1e
SHA1

d7aebcac188b135d6b401b25a3b3043bf8822edf
SHA256

a48fcd0255d2815a5853eacf6986db66e0fb9b88e56c3cc27721ab676390e1e6
SHA512

fb33ad3e6cd7fd19467e0b841fceb62460f5f586fe454c1600f872f49b372ae93adb52865d8b0b7a6aded19b81a32a6a596d6bc469b65340db16ab8d89c69d72
SSDEEP

768:MRiIh06u21fs2Mw3zRfzNcF5MjHwhbY4AEHYBVX4nvNKyWXQfroyP3cS:MB13Mw3zRpAGb+h5TrES

Score

N/A

Malware Config

Signatures

Files

a48fcd0255d2815a5853eacf6986db66e0fb9b88e56c3cc27721ab676390e1e6
.exe windows x86

e0734dc195e068eee77bdf393bfeb69d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateStatusWindowW
ord17

kernel32

WriteConsoleW
LCMapStringEx
HeapSize
CloseHandle
CreateFileW
GetStringTypeW
GetConsoleCP
WideCharToMultiByte
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
TerminateProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentThreadId
InterlockedIncrement
SetLastError
RtlUnwind
GetStartupInfoW
InitOnceExecuteOnce
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetConsoleMode
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
GetModuleFileNameW
WriteFile
GetStdHandle
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
InterlockedDecrement
DecodePointer
EncodePointer
GetProcessHeap
IsProcessorFeaturePresent
ReadFile
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleW
IsWow64Process
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
VirtualAlloc
GetTickCount
GetLastError
GetCommandLineW
WaitForSingleObject
Sleep
GetCurrentProcess
ExitProcess
SetEndOfFile
GetExitCodeProcess
CreateProcessW

rtutils

TraceRegisterExA
TracePrintfA
TraceDeregisterW
TracePrintfW
RouterAssert

ws2_32

WSACancelAsyncRequest
WSALookupServiceBeginA
WSASendDisconnect

urlmon

UrlMkSetSessionOption
Extract
URLDownloadToCacheFileA

wsnmp32

ord220
ord400
ord206
ord900
ord104
ord603
ord504
ord501

user32

LoadIconW
GetParent
LoadCursorW
LoadImageW
UpdateWindow
GetSubMenu
CheckMenuItem
DestroyMenu
LoadMenuW
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
RegisterClipboardFormatW
ShowWindow
CreateWindowExW
RegisterClassExW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadStringW
IMPQueryIMEW
OpenClipboard
GetKeyboardType
SetCursorPos
SetMenuContextHelpId
LoadKeyboardLayoutA
GetMenuContextHelpId
DdeQueryStringA
CharUpperBuffW

mpr

WNetGetUserA
WNetGetProviderNameA
WNetGetConnectionW

gdi32

TextOutA
WidenPath
GdiDeleteSpoolFileHandle
ExtCreatePen
StartDocW

setupapi

SetupDiGetDeviceInstanceIdW
SetupDiBuildClassInfoListExA
SetupGetInfFileListW
SetupDiGetHwProfileFriendlyNameExW

mapi32

ord8
ord23
ord42
ord12
ord161
ord241
ord122

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e0734dc195e068eee77bdf393bfeb69d

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

rtutils

ws2_32

urlmon

wsnmp32

user32

mpr

gdi32

setupapi

mapi32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 12KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 12KB