e776d984f16bb166974a37377164f577f9252290fd1060456853af6c2162a692

Sharing

Copy URL Twitter E-mail

General

Target

e776d984f16bb166974a37377164f577f9252290fd1060456853af6c2162a692
Size

293KB
MD5

6ce516c286717f81a44a0a2caab99580
SHA1

59336ee3ceb764e6792ff007fb58b317649ed0f3
SHA256

e776d984f16bb166974a37377164f577f9252290fd1060456853af6c2162a692
SHA512

bf97781e9da7f476db1429e64f5e32808eb86a1faba6d1a7a4acba0ebeeb7c8699797641790e9800e276ef2872bcb56bb3e27088a3d0f085475ea133fd9e76fc
SSDEEP

3072:GsnpjrzptcQPU3au+thbf3aZJ/6qwgT/qVTGeA4Pn8NBRB27JAEs0y2ZFueY2IMg:GsBlLPDbCZZ6qZ/qtGeAp27JA6PudZ

Score

N/A

Malware Config

Signatures

Files

e776d984f16bb166974a37377164f577f9252290fd1060456853af6c2162a692
.exe windows x86

007d1cd4db528b6c941bafa37e121de0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
WideCharToMultiByte
WriteFile
SetConsoleCtrlHandler
GetModuleHandleW
GetModuleFileNameW
WaitForSingleObject
VirtualQuery
LockResource
ReadFile
FlushFileBuffers
CreateFileA
GetStdHandle
GetACP
GetConsoleOutputCP
CreateProcessW
LoadResource
SizeofResource
WriteConsoleW
WriteConsoleA
SetStdHandle
LoadLibraryA
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
Sleep
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
GetModuleFileNameA
DeleteFileW
VirtualProtect
CloseHandle
FindResourceW
FindResourceExW
VirtualAlloc
GetConsoleMode
RaiseException
MultiByteToWideChar
GetVersionExA
GetTickCount
GetProcAddress
CreateFileW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedExchange
GetLocaleInfoA
GetThreadLocale
GetLastError
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount

user32

UnregisterClassA

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VariantClear
SysFreeString
SysAllocStringLen

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

007d1cd4db528b6c941bafa37e121de0

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Sections

.text Size: 79KB - Virtual size: 79KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 12KB

.vmp0 Size: 192KB - Virtual size: 1.3MB

.text
Size: 79KB - Virtual size: 79KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 12KB

.vmp0
Size: 192KB - Virtual size: 1.3MB