ed30ce9bc823d29775faba3d890e840d662ca3dc8602322cb169f4994b670de9

General

Target

ed30ce9bc823d29775faba3d890e840d662ca3dc8602322cb169f4994b670de9
Size

613KB
MD5

362e7cc7fd23ce44a923c2481172208a
SHA1

1cc2167b22f28556d2c6453825ffd97a41e522de
SHA256

ed30ce9bc823d29775faba3d890e840d662ca3dc8602322cb169f4994b670de9
SHA512

48d7e27a8e49ed9b89def5923a138b077d4a3ba7eb8efda8269be159bffb7b8f258afc5b0c8de794f4aea4ffa3504c8156a8e12f66e61c0b6e3c15fd86af924d
SSDEEP

6144:ACFdgck/rKr7m+JP5AhVQZGfn53Y1WbPS+KQP1v/I0z+SBKx:Byck/A7XzAhsan53p2+KQdjz+SBo

Score

N/A

Malware Config

Signatures

Files

ed30ce9bc823d29775faba3d890e840d662ca3dc8602322cb169f4994b670de9
.exe windows x86

386471679da74222c8b395024561ab15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperW
SetWindowContextHelpId
GetUserObjectInformationW
RegisterClipboardFormatW
DrawTextW
EnumWindowStationsW
wvsprintfA
wsprintfW
LoadImageA

comctl32

CreateStatusWindowW

kernel32

WriteProcessMemory
WaitNamedPipeA
CreatePipe
MoveFileExA
ReadDirectoryChangesW
InitializeCriticalSection
GetPrivateProfileStringA
FindFirstFileExW
OpenSemaphoreW
AllocConsole
ReleaseMutex
_lopen
SetVolumeLabelA
GetHandleInformation
GetSystemDefaultLangID
WritePrivateProfileSectionA
CreateIoCompletionPort
ExitProcess
DeleteCriticalSection
ReadConsoleInputW
OpenMutexA
GetTimeZoneInformation

advapi32

SetKernelObjectSecurity
CreateServiceW
InitializeSid
SetSecurityDescriptorGroup
GetSecurityDescriptorLength
RegisterEventSourceW
SetFileSecurityW
RegEnumKeyA
SetThreadToken
RegSetValueExA
RegGetKeySecurity
SetNamedSecurityInfoA
GetUserNameA
CryptDestroyKey
GetFileSecurityA

msvcrt

wprintf
_wstrdate
_strdup
_getmbcp
srand
_wtoi64
_beginthread
asctime
ungetc
_ultoa
_cwait
bsearch
_mbsicmp

Sections

.text
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

386471679da74222c8b395024561ab15

Headers

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

msvcrt

Sections

.text Size: 312KB - Virtual size: 311KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 280KB - Virtual size: 280KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 312KB - Virtual size: 311KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 280KB - Virtual size: 280KB

.rsrc
Size: 16KB - Virtual size: 16KB