efa3917656ed09397caa0fe209105f99ed93da5ceb430084bb0d4703fd68d893

Sharing

Copy URL Twitter E-mail

General

Target

efa3917656ed09397caa0fe209105f99ed93da5ceb430084bb0d4703fd68d893
Size

173KB
MD5

6d99b9b122a91c9edf24bf86c8b7161f
SHA1

bc7123d541df7280e6e861399da424d3f91bec18
SHA256

efa3917656ed09397caa0fe209105f99ed93da5ceb430084bb0d4703fd68d893
SHA512

e63cfe9feda0c6493c102ff3f894838f373d6c05915d7cda3ed0b8f89685211bfc4cdffb241ff701fc394df2b5cd99a49a77ee38fbd792dcf533fcea32b41ec4
SSDEEP

3072:zq8EGjt/aakYJlqUBCvbHhkXEgjcRHDkJDh7BijArHck9p+qE:zq87p29bBMKHD64jkF+qE

Score

N/A

Malware Config

Signatures

Files

efa3917656ed09397caa0fe209105f99ed93da5ceb430084bb0d4703fd68d893
.exe windows x86

4274216740f7a5d6da6d609903be566b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
Sleep
GetExitCodeThread
CloseHandle
WaitForSingleObject
CreateThread
CreateMailslotA
CreateEventA
HeapFree
ReadFile
HeapAlloc
GetMailslotInfo
GetProcessHeap
SetEvent
WriteFile
CreateFileA
GetProcAddress
GetModuleHandleA
SetEndOfFile
SetErrorMode
DeleteFileA
GetLastError
FindClose
FindFirstFileA
SetLastError
GetDiskFreeSpaceA
lstrcpynA
SetFilePointer
lstrlenA
GetFileAttributesA
CreateDirectoryA
IsDBCSLeadByte
GetCurrentThreadId
GetVersionExA
LoadLibraryA
lstrcatA
GetWindowsDirectoryA
FreeLibrary
lstrcmpA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ResetEvent
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
LCMapStringA
FlushFileBuffers
LCMapStringW
FreeEnvironmentStringsA
GetOEMCP
GetACP
SetStdHandle
GetStringTypeW
GetStringTypeA
GetCPInfo
IsBadCodePtr
IsBadReadPtr
MultiByteToWideChar
VirtualAlloc
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapSize
GetEnvironmentStringsW
VirtualFree
IsBadWritePtr
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate

user32

PostThreadMessageA
GetWindowRect
GetDesktopWindow
IsRectEmpty
CreateWindowExA
DestroyWindow
UpdateWindow
DefWindowProcA
ShowWindow
PeekMessageA
LoadCursorA
RegisterClassExA
wsprintfA
TranslateMessage
DispatchMessageA
GetMessageA

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nrdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4274216740f7a5d6da6d609903be566b

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 4KB - Virtual size: 4KB

.nrdata Size: 80KB - Virtual size: 80KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 4KB - Virtual size: 4KB

.nrdata
Size: 80KB - Virtual size: 80KB