e0740098cb0acdcdc6b05a8fb983bd088c15d3597ba4c6398e0b165814481ed4

General

Target

e0740098cb0acdcdc6b05a8fb983bd088c15d3597ba4c6398e0b165814481ed4
Size

596KB
MD5

660268b39e934eb83687ee89fd3689d0
SHA1

2c78675e652fe21cbee53b53522fc51a2b1a60ff
SHA256

e0740098cb0acdcdc6b05a8fb983bd088c15d3597ba4c6398e0b165814481ed4
SHA512

bd922ca3ca8914adc1d95c08bdcef36ffd301c30ba808afac02292cf11a07e5cf12298dab465eb545e97b5d26c9bd1ee40b56f04836160febf42ea9a652cc017
SSDEEP

12288:cW6KBff80r6KBff80dqPMezW8jdjdj0D92YGOu:cfKBc0uKBc02Mez/JJG925Ou

Score

N/A

Malware Config

Signatures

Files

e0740098cb0acdcdc6b05a8fb983bd088c15d3597ba4c6398e0b165814481ed4
.exe windows x86

ec4b2832dc051e362e43ece2dcca5068

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveExtensionA
PathStripPathA
PathRemoveBlanksA
PathUnquoteSpacesA
PathRemoveFileSpecA

kernel32

VirtualFree
FlushFileBuffers
CreateFileA
GetModuleFileNameA
GetFileAttributesA
CreateProcessA
CloseHandle
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ec4b2832dc051e362e43ece2dcca5068

Headers

File Characteristics

Imports

shlwapi

kernel32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 540KB - Virtual size: 540KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 540KB - Virtual size: 540KB