2ecf112fec1bf1f6d128f62e7806c2e8a02ad1b5ec31ba07fc5670e13b24d0a4

General

Target

2ecf112fec1bf1f6d128f62e7806c2e8a02ad1b5ec31ba07fc5670e13b24d0a4
Size

448KB
MD5

034025c5b91a57ea4843ae7d7c51de82
SHA1

248859e0013d049e7a99d456cdf7a49435993d2e
SHA256

2ecf112fec1bf1f6d128f62e7806c2e8a02ad1b5ec31ba07fc5670e13b24d0a4
SHA512

1ecd8a364cbb85d7be9c92ae7ee753cd7a51654801c583c1f50e54f5626e03c2e6d9bfc4481ea0ef58e6ddbaed04fc62448b605e5c464993ed06c19eee638e75
SSDEEP

12288:SpSOteUKJe/i6pElnnaM2H2en2quCCoA2:wtzKQ/i62nBczhuC3

Score

N/A

Malware Config

Signatures

Files

2ecf112fec1bf1f6d128f62e7806c2e8a02ad1b5ec31ba07fc5670e13b24d0a4
.zip
03ce2d3f08d63abc256735b29efaa6fc
.exe windows x86

a7ce345f7f6ad74744daadf85c981ae0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetComputerNameA
GetVolumeInformationA
GetDriveTypeA
LoadResource
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
LockResource
SizeofResource
FreeResource
GetModuleFileNameA
FreeLibrary
GetShortPathNameA

user32

FindWindowA

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA

shell32

ShellExecuteA

msvcrt

_XcptFilter
strcat
strcpy
strlen
fclose
fread
malloc
ftell
fseek
fopen
memcmp
sprintf
exit
fwrite
memcpy
memset
free
sscanf
strncat
realloc
_exit
strncpy
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

wininet

FindNextUrlCacheEntryA
InternetOpenUrlA
InternetOpenA
FindCloseUrlCache
InternetCloseHandle
FindFirstUrlCacheEntryA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 818KB - Virtual size: 882KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a7ce345f7f6ad74744daadf85c981ae0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

wininet

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 818KB - Virtual size: 882KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 818KB - Virtual size: 882KB