21e0c0b7aff0fdb64fd33af718c5ec570882f9efd9edc1d6465107389ea1db80

Sharing

Copy URL Twitter E-mail

General

Target

21e0c0b7aff0fdb64fd33af718c5ec570882f9efd9edc1d6465107389ea1db80
Size

2.6MB
MD5

af28b9dadc18140294890ec0a33c7248
SHA1

e12041329c88f3883fbbe7759aa7e4344b79d75d
SHA256

21e0c0b7aff0fdb64fd33af718c5ec570882f9efd9edc1d6465107389ea1db80
SHA512

ae5f78d1e7c562393001a57ef3cdfb844e0b597fee92c5fe85c83ed7e562ff4c084da88a09a8a59d3a63497408149749bb9029e143fc510f9d4bdc2dcc833f3c
SSDEEP

49152:pzINFTho4aitZGmh7Ah2Vj/zK1EXxZHBRbM3Urpqnkirx15p37DjnHteBanNO5kc:pUfTh+whsEPhR+nkirxJ7DjnN1NVs/

Score

N/A

Malware Config

Signatures

Files

21e0c0b7aff0fdb64fd33af718c5ec570882f9efd9edc1d6465107389ea1db80
.exe windows x86

2ea2093a61fd964987e348eee4799243

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString

advapi32

RegFlushKey

user32

DrawFrameControl

kernel32

GetVersion
GetVersionExA
HeapCreate
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

SetWinMetaFileBits

version

GetFileVersionInfoSizeA

ole32

CoInitialize

comctl32

ImageList_Read

shell32

ShellExecuteA

Sections

.text
Size: - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 23KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ea2093a61fd964987e348eee4799243

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

shell32

Sections

.text Size: - Virtual size: 572KB

.itext Size: - Virtual size: 2KB

.data Size: - Virtual size: 11KB

.bss Size: - Virtual size: 23KB

.idata Size: - Virtual size: 10KB

.tls Size: - Virtual size: 52B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 2.0MB

.vmp1 Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 512B - Virtual size: 192B

.rsrc Size: 98KB - Virtual size: 98KB

.text
Size: - Virtual size: 572KB

.itext
Size: - Virtual size: 2KB

.data
Size: - Virtual size: 11KB

.bss
Size: - Virtual size: 23KB

.idata
Size: - Virtual size: 10KB

.tls
Size: - Virtual size: 52B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 2.0MB

.vmp1
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 512B - Virtual size: 192B

.rsrc
Size: 98KB - Virtual size: 98KB