e94ec8341f5cc8c3c3c55d1ae2b651ec8deed56f058a12aa89ab67472b76f551

Sharing

Copy URL Twitter E-mail

General

Target

e94ec8341f5cc8c3c3c55d1ae2b651ec8deed56f058a12aa89ab67472b76f551
Size

131KB
MD5

0678f62d8413ad1771dd2a5d4a03cda0
SHA1

4416ae2a5272e84be07041b129415bb5445587b0
SHA256

e94ec8341f5cc8c3c3c55d1ae2b651ec8deed56f058a12aa89ab67472b76f551
SHA512

d5b06e465d69dcf0890f28704589ae55f5ec29946b45b16a8fbb06f18e0bb54a135655f33d8df4736e0d01b565cbd755cc4196db08c3a7380bc8c5063bfa352d
SSDEEP

3072:JbD2aKYF+/fFE6K+m9BTO/yOFuE6dCOkz2FgC6ucza2:Jn2aaK6Kl9I/lw2iTH2

Score

N/A

Malware Config

Signatures

Files

e94ec8341f5cc8c3c3c55d1ae2b651ec8deed56f058a12aa89ab67472b76f551
.exe windows x86

02fced34849eb2c3d6f45749ff570b52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
LocalAlloc
LocalFree
VirtualProtect
lstrcmpiA
FreeLibrary

shell32

SHGetFolderPathA

user32

GetDC
LoadAcceleratorsA
LoadCursorA
LoadIconA
RegisterClassW

ntdll

NtClose
NtOpenKey
NtOpenSymbolicLinkObject
NtQuerySymbolicLinkObject
NtQueryValueKey
RtlAllocateHeap
RtlFreeHeap
RtlFreeUnicodeString
RtlInitUnicodeString
NtOpenFile

rpcrt4

RpcServerRegisterIf

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
StartServiceCtrlDispatcherA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ydata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

02fced34849eb2c3d6f45749ff570b52

Headers

File Characteristics

Imports

kernel32

shell32

user32

ntdll

rpcrt4

advapi32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 117KB - Virtual size: 364KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 100B

.xdata Size: 512B - Virtual size: 301B

.ydata Size: 512B - Virtual size: 140B

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 117KB - Virtual size: 364KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 100B

.xdata
Size: 512B - Virtual size: 301B

.ydata
Size: 512B - Virtual size: 140B