e4d9bbd9563330a3c41c98330968887901d38d3cc90a6727511bff5926bd6765

General

Target

e4d9bbd9563330a3c41c98330968887901d38d3cc90a6727511bff5926bd6765
Size

272KB
MD5

6a14dffc10608e2b989ed9e61dbbcc80
SHA1

ed6d2d8b7e675525a69b14eb07c7bb1ff035c748
SHA256

e4d9bbd9563330a3c41c98330968887901d38d3cc90a6727511bff5926bd6765
SHA512

db5a0bcd2764ba879e695a4acd34033fb0f3cc13cb48222fc2c94bd05bddf2cd16850a9d456807a4cb2cbc6b5b9440f5be171cf1ddf2b91687deece88547a517
SSDEEP

6144:KEGZfGSo0sDfvXB0Qhe8wBxyrfWeGi/zK/9Gt8q:20vRWxqA/9GN

Score

N/A

Malware Config

Signatures

Files

e4d9bbd9563330a3c41c98330968887901d38d3cc90a6727511bff5926bd6765
.exe windows x86

164aeae482e97305b161b32a42d5a6cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
CreateSemaphoreA
CreateMutexA
GetStdHandle
CreateEventA
VirtualAlloc
GetModuleHandleW
GetProcAddress
IsBadWritePtr
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetModuleFileNameA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
LoadLibraryA

shlwapi

PathUndecorateW

winscard

SCardFreeMemory

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 236KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.evgenij
Size: 4KB - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

164aeae482e97305b161b32a42d5a6cb

Headers

File Characteristics

Imports

kernel32

shlwapi

winscard

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 236KB - Virtual size: 268KB

.evgenij Size: 4KB - Virtual size: 988B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 236KB - Virtual size: 268KB

.evgenij
Size: 4KB - Virtual size: 988B

.rsrc
Size: 4KB - Virtual size: 1KB