ef717ecbf9b4d60de97d376e16123c49e80225a1366cd48bcb4f9490f84d730f

Sharing

Copy URL Twitter E-mail

General

Target

ef717ecbf9b4d60de97d376e16123c49e80225a1366cd48bcb4f9490f84d730f
Size

12.0MB
MD5

7013d8e292107de5d6f264f60e89c9dc
SHA1

5a8d356565f3314388cda5fbd7ea0f0e1319e571
SHA256

ef717ecbf9b4d60de97d376e16123c49e80225a1366cd48bcb4f9490f84d730f
SHA512

e8e9bc921a2c7392b4da48ab473da21ebb8a264d766bdbf97a398eff3c3419aa915d8421a198ea5d53aafcae48a10b4f2fa6a635d515afae193de8633c2e4b1d
SSDEEP

49152:oEIYOP7IDt7ccqVngF7VJtCb4BhKC48uq3JUOSVNK65u:oEIr67ccqeJtcFC3SzQ

Score

N/A

Malware Config

Signatures

Files

ef717ecbf9b4d60de97d376e16123c49e80225a1366cd48bcb4f9490f84d730f
.exe windows x86

ecc61d5b519128176a79be83cebb8e1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WideCharToMultiByte
SetStdHandle
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
SetFilePointer
VirtualQuery
InterlockedExchange
RtlUnwind
InitializeCriticalSection
TlsGetValue
TlsSetValue
GetCurrentThreadId
SetLastError
TlsAlloc
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
HeapReAlloc
VirtualAlloc
EnterCriticalSection
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
VirtualProtect
GetSystemInfo
CloseHandle
ExitProcess
GetModuleHandleA
GetProcAddress
GetLastError
TerminateProcess
Sleep
GetCommandLineW
TlsFree
LeaveCriticalSection
HeapFree
HeapAlloc
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection

user32

ToAsciiEx
EndPaint
SetWindowPlacement
SetCursor
SetTimer
HideCaret
ScreenToClient
SetActiveWindow
PostQuitMessage
TrackPopupMenu
SetKeyboardState
SetCapture
KillTimer
IsZoomed
DeleteMenu
LoadIconA
MessageBoxIndirectA
SetFocus
SendMessageA
DrawEdge
ShowCaret
RegisterWindowMessageA
BeginPaint
WinHelpA
TranslateMessage
ShowCursor
GetForegroundWindow
GetWindowTextA
GetKeyboardLayout
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowLongA
GetClipboardData
EmptyClipboard
SetClassLongA
EndDialog
DefWindowProcA
GetSysColor
SetWindowPos
CheckDlgButton
ShowWindow
CreatePopupMenu
AppendMenuA
CreateCaret
PostMessageA
DefDlgProcA
OpenClipboard
SystemParametersInfoA
ReleaseCapture
InsertMenuA
EnableWindow
SetClipboardData
FindWindowA
GetDlgItemTextA
GetCaretBlinkTime
CheckMenuItem
GetClipboardOwner
MoveWindow
RegisterClipboardFormatA

gdi32

SetBkMode
GetTextExtentPoint32A
LineTo
SetTextColor
GetBkMode
CreateFontA
GetDeviceCaps
SetPixel
SetMapMode
Rectangle
GetCharWidthA
ExtTextOutW
GetCharWidth32W
RealizePalette
SelectPalette
Polyline
SetTextAlign
GetPixel
GetObjectA
UpdateColors
TextOutA

shell32

CommandLineToArgvW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecc61d5b519128176a79be83cebb8e1b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 176KB - Virtual size: 173KB

.data Size: 1.0MB - Virtual size: 1.0MB

.rsrc Size: 32KB - Virtual size: 30KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 176KB - Virtual size: 173KB

.data
Size: 1.0MB - Virtual size: 1.0MB

.rsrc
Size: 32KB - Virtual size: 30KB