e5bafdd9d27defccb5c62db15a0374ccdeedb6a279b33776e8fc1ecb728d70e4

General

Target

e5bafdd9d27defccb5c62db15a0374ccdeedb6a279b33776e8fc1ecb728d70e4
Size

595KB
MD5

1c1a6b70b5e2b13c019d5cbdf0f12738
SHA1

d21b9d5ca7327bb1ca57aaf8752e7764a3334fe8
SHA256

e5bafdd9d27defccb5c62db15a0374ccdeedb6a279b33776e8fc1ecb728d70e4
SHA512

f6c37079d3f7ae55cfdb1e588830d30bad4b820afc7765c20081a501fe916c6b1b8aa78090801ecb7f3776ae8766987220af5a4eb2639b7d87f56721be7bc675

Score

N/A

Malware Config

Signatures

Files

e5bafdd9d27defccb5c62db15a0374ccdeedb6a279b33776e8fc1ecb728d70e4
.exe windows x86

80bdc9bb83b743b0e1aa86562399fdea

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetDlgItemTextW
DrawStateW
LoadIconA
InsertMenuW
DispatchMessageA
LoadCursorA
DialogBoxParamA
PeekMessageA
CreateWindowExW
IsDialogMessageW
LoadBitmapW
wsprintfA
GetPropW
CharUpperW
GetClassLongA

kernel32

CreateJobObjectA
GetCurrentThread
InterlockedExchange
CreateWaitableTimerA
lstrcatA
GetModuleHandleA
FindResourceA
GetCommandLineA
CreateSemaphoreA
GetPrivateProfileStringA
SetLastError
GetLogicalDriveStringsA
WaitForSingleObject
DefineDosDeviceA
GetCurrentDirectoryA
lstrcpy
FormatMessageA
LoadLibraryA
CreateDirectoryW
GetCurrentProcess
CreateProcessA
IsBadCodePtr
IsBadStringPtrA
ReadConsoleA
GlobalAddAtomW
GetProcAddress
GetFileAttributesA

cmpbk32

PhoneBookEnumCountries
PhoneBookLoad
PhoneBookFreeFilter
PhoneBookEnumNumbers
PhoneBookCopyFilter

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.opc
Size: 518KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80bdc9bb83b743b0e1aa86562399fdea

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

cmpbk32

Sections

.text Size: 49KB - Virtual size: 49KB

.rdata Size: 24KB - Virtual size: 24KB

.opc Size: 518KB - Virtual size: 517KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 49KB - Virtual size: 49KB

.rdata
Size: 24KB - Virtual size: 24KB

.opc
Size: 518KB - Virtual size: 517KB

.rsrc
Size: 2KB - Virtual size: 1KB