ea9530bbd752454f17595448440f799c7f8a42f7ad29563588a19714cfbe6312

Sharing

Copy URL Twitter E-mail

General

Target

ea9530bbd752454f17595448440f799c7f8a42f7ad29563588a19714cfbe6312
Size

87KB
MD5

03f959ce17580b003d47cd3b5d31555b
SHA1

435e15052c18371497bfefb8a1ad48536e98a20b
SHA256

ea9530bbd752454f17595448440f799c7f8a42f7ad29563588a19714cfbe6312
SHA512

bea0cfb38f6a7e4366abb5e8ddb02b771809394130232713aa7c3a1643a3539c0c197fe1bdb0e952388f7f9012fe7741c86fb49f6fec175517ab8ed3ebb369d2
SSDEEP

1536:01b8oanHNDZhdTbXn6FcX/PQpnAD2tgTfVtBVF4CB6p9sg2yMPu:0g/vVYpAffVt/F3BiqnPu

Score

N/A

Malware Config

Signatures

Files

ea9530bbd752454f17595448440f799c7f8a42f7ad29563588a19714cfbe6312
.exe windows x86

6ef3a4305d5b7e08bca8238017b208fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThread
GetLastError
LoadLibraryA
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetModuleHandleW
GetCommandLineW
GetVersion
GetCommandLineA
WriteFile
SetFilePointer
CloseHandle
CreateFileA
TlsGetValue
ExitProcess
GetStringTypeW

user32

GetWindowTextLengthW
SystemParametersInfoW
GetScrollRange
ShowScrollBar
GetDlgItemInt
SetDlgItemInt
DestroyMenu
MapWindowPoints
CreateCaret
SetTimer
KillTimer
LoadIconW
MessageBoxW
SetPropA
GetSystemMenu
GetMenuItemCount
GetMenuItemID
RemoveMenu
UnhookWindowsHookEx
CreateDialogIndirectParamW
GetWindowTextW
DialogBoxIndirectParamW
GetScrollInfo
IsWindow
CallWindowProcW
EnableWindow
GetDlgItem
SetWindowLongW
GetScrollPos
EndPaint
GetWindow
GetParent
MapVirtualKeyA
GetKeyNameTextW
IsDialogMessageA
PostMessageA
SetWindowLongA
SetWindowsHookExA
GetWindowRect
GetSystemMetrics
GetForegroundWindow
GetClientRect
SendMessageW

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
StartServiceCtrlDispatcherW
RegEnumKeyW
RegisterServiceCtrlHandlerW
OpenSCManagerW
CloseServiceHandle
RegDeleteKeyW
RegCreateKeyExW
QueryServiceStatus
RegOpenKeyA

ws2_32

WSASocketA
WSAStartup
socket
WSACleanup
send
WSAConnect
WSACreateEvent
WSAGetOverlappedResult

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ef3a4305d5b7e08bca8238017b208fe

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 30KB - Virtual size: 65KB

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 30KB - Virtual size: 65KB