ef5b57ccf5b8a55978dcc933aa9adc05ef91ac7672a0104b588eb9314e19f512

Sharing

Copy URL Twitter E-mail

General

Target

ef5b57ccf5b8a55978dcc933aa9adc05ef91ac7672a0104b588eb9314e19f512
Size

1.8MB
MD5

e90b6aeb07e0b202f4d0ce4fbdbf21c2
SHA1

e8d0d355b361b84376161bddfea5c7ef706a5952
SHA256

ef5b57ccf5b8a55978dcc933aa9adc05ef91ac7672a0104b588eb9314e19f512
SHA512

23d7722fcee6b268d636ea9ee2c6bd61e5bb120ca87d9af6c316e0a65f6d19aeb70989128f96fa16b2ab681bac3b030abce8ce5e84f755eabe48510bf3b11b24
SSDEEP

24576:6eju6lTdpZG/ljDLWXUF+rNXx9OHENa5VIFIB189gmL13gSj3Oph6Vx3kCwHnGN6:2mpG/1WXUmFKHsy89ZL133T/cHnGN

Score

N/A

Malware Config

Signatures

Files

ef5b57ccf5b8a55978dcc933aa9adc05ef91ac7672a0104b588eb9314e19f512
.exe windows x86

b98e225040040f1c23d14ad2c43a0cca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
CopyFileA
GetFileSize
CopyFileExW
ReadFile
GetCPInfo
DeleteAtom
FindFirstFileA
WriteFile
DeleteFileW
Sleep
CreateThread
OpenFile
GetComputerNameA
FindAtomA
CreateThread
WriteFile
GetLastError
OpenFile
ReadConsoleW
GetConsoleMode
GetStdHandle
GlobalFree
FindFirstFileA
CreateDirectoryA
DeleteAtom
GetCommandLineA
ReadConsoleA
ReadFile
Sleep
GetFileSize
DeleteFileW
CopyFileW
CopyFileExA
WriteFile
GetStdHandle
CopyFileExW
CopyFileA
FindAtomA
GetCommandLineA
ReadFile
GetFileTime
ReadConsoleA
OpenFile
GetLastError
FindFirstFileA
CreateThread
CopyFileExA
CreateDirectoryA
GetLastError
CopyFileExW
GetComputerNameA
ReadConsoleA
CopyFileW
DeleteFileA
ReadFile
DeleteFileW
GetConsoleMode
ExitThread
GetCommandLineA
GetFileSize
WriteFile
ReadConsoleA
CopyFileW
CreateThread
FindAtomA
GetStdHandle
GetFileSize
WriteFile
CopyFileA
DeleteFileW
ExitThread
DeleteFileA
ReadConsoleW
Sleep
CopyFileExW

Sections

.bbs
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 24KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b98e225040040f1c23d14ad2c43a0cca

Headers

File Characteristics

Imports

kernel32

Sections

.bbs Size: 1.7MB - Virtual size: 1.7MB

.itext Size: 8KB - Virtual size: 6KB

.reloc Size: 8KB - Virtual size: 4KB

.edata Size: 24KB - Virtual size: 3.2MB

.bss Size: 4KB - Virtual size: 89B

.rdata Size: 4KB - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 7KB

.rsrc Size: 12KB - Virtual size: 10KB

.bbs
Size: 1.7MB - Virtual size: 1.7MB

.itext
Size: 8KB - Virtual size: 6KB

.reloc
Size: 8KB - Virtual size: 4KB

.edata
Size: 24KB - Virtual size: 3.2MB

.bss
Size: 4KB - Virtual size: 89B

.rdata
Size: 4KB - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 12KB - Virtual size: 10KB