eedc67a0bf3f35e7819f53e03e09b5a481af24a3e2fae93fbc260d9d03211077

Sharing

Copy URL Twitter E-mail

General

Target

eedc67a0bf3f35e7819f53e03e09b5a481af24a3e2fae93fbc260d9d03211077
Size

172KB
MD5

7669199c3d4f487fc5cb1ffcf440bfac
SHA1

ad31716880bab19be797a863af9bceaf856cddaa
SHA256

eedc67a0bf3f35e7819f53e03e09b5a481af24a3e2fae93fbc260d9d03211077
SHA512

93003d03cfe8f2e3ff16f21371772e40f4fe01f4537946491e6bd9873d4cca5b63c131e272d69268cd5292174f5e9cabffeb29e329a4b0f13188d3033f7b6e1d
SSDEEP

3072:0fmeFY5cxymLsNNn1uDzCTCQBdgygemrLxHaqhcepBnW4A+0da1hxvgwNlcLr:56B8n1j2QBlYLxHjhHW4f0ehlcL

Score

N/A

Malware Config

Signatures

Files

eedc67a0bf3f35e7819f53e03e09b5a481af24a3e2fae93fbc260d9d03211077
.exe windows x86

ce44431a9084c7d7d69d85b767651c5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapWalk
TlsSetValue
PulseEvent
GetShortPathNameW
HeapAlloc
GetTempPathW
GetVersion
CreateSemaphoreW
SetCurrentDirectoryW
GetVersionExA
SetThreadPriority
SetFileAttributesW
WaitForMultipleObjectsEx
GetDateFormatA
GetThreadLocale
SetThreadExecutionState
WaitForSingleObjectEx
HeapLock
WaitForMultipleObjects
GetLastError
EnumSystemLocalesA
WriteFile
GlobalReAlloc
GetCompressedFileSizeW
TlsFree
GetThreadContext
FindResourceA
FormatMessageA
SetCurrentDirectoryA
GetFileAttributesExA
lstrcpyW
CreateMailslotW
GlobalDeleteAtom
FindResourceW
GlobalMemoryStatusEx
EnumResourceNamesA
CreateDirectoryW
GetSystemDefaultLangID
GlobalMemoryStatus
GetThreadTimes
QueryDosDeviceW
IsBadStringPtrW
SetWaitableTimer
GetStringTypeExW
IsDBCSLeadByteEx
FreeLibrary
EscapeCommFunction
GetTimeFormatW
ConnectNamedPipe
GetProfileIntW
FindResourceExA
GlobalAddAtomW
GlobalLock
EnumResourceNamesW
OpenSemaphoreW
GetNumberFormatW
WinExec
GlobalHandle
ResumeThread
GetCurrentDirectoryW
HeapCreate
WaitCommEvent
IsBadReadPtr
FreeResource
SetCommTimeouts
ReleaseSemaphore
GetNumberFormatA
SetSystemTime
GetSystemTime
lstrcmpW
TlsGetValue
MoveFileExA
LoadLibraryW
CreateFileW
GlobalCompact
AreFileApisANSI
GetExitCodeThread
LocalAlloc
GetComputerNameA
CloseHandle
RemoveDirectoryW
LoadLibraryA
SearchPathW
FindFirstChangeNotificationW
RemoveDirectoryA
FoldStringW
SetupComm
GetOverlappedResult
DeleteCriticalSection
GlobalAlloc
GetFileType
GetACP
CreateSemaphoreA
HeapFree
LockFile
RegisterWaitForSingleObject
GetSystemTimeAdjustment
VerSetConditionMask
lstrcpynW
CompareStringW
GetSystemTimeAsFileTime
SleepEx
EnterCriticalSection
FindFirstFileW
CreateEventW
GetPriorityClass
lstrcpynA
SizeofResource
CreateFileA
CreateWaitableTimerW
lstrlenW

Exports

Exports

?AightDialog@@YGEUtext@@@Z
?GoodAimTFS@@YGEUtext@@@Z
?GoodLowmFire@@YGEUtext@@@Z
?MainPort@@YGEUtext@@@Z
?NineDialog@@YGEUtext@@@Z

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.okan
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.push3
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce44431a9084c7d7d69d85b767651c5a

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.data Size: 35KB - Virtual size: 34KB

.okan Size: 16KB - Virtual size: 16KB

.push3 Size: 16KB - Virtual size: 16KB

.rsrc Size: 64KB - Virtual size: 63KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 37KB - Virtual size: 37KB

.data
Size: 35KB - Virtual size: 34KB

.okan
Size: 16KB - Virtual size: 16KB

.push3
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 64KB - Virtual size: 63KB

.reloc
Size: 2KB - Virtual size: 1KB