ea34c7952d8553828006944578d06f61056341b5f388f146f26b0c12a3f1a848

General

Target

ea34c7952d8553828006944578d06f61056341b5f388f146f26b0c12a3f1a848
Size

142KB
MD5

3fa39957763b0ff79b6892ce72387d10
SHA1

8acf0b49b74ae78e95e97be61f410811828e4f03
SHA256

ea34c7952d8553828006944578d06f61056341b5f388f146f26b0c12a3f1a848
SHA512

7a054712e0ed4c4ce37d434e82714983e07e1c8f388d0a6a8a2265165685cc19222c6da05962e5cf587d49de3638982204b89edc83a9a84b6c8589793a6cf1ee
SSDEEP

3072:A2DvqxtToYddW29ZJfjkNBE9Vshx8gZuoC96rjW:NDCxB1S29DYrET9R6r6

Score

N/A

Malware Config

Signatures

Files

ea34c7952d8553828006944578d06f61056341b5f388f146f26b0c12a3f1a848
.exe windows x86

fe5fc55725803675bf5eb00b15d297d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
GetModuleHandleA
VirtualFree
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
GetThreadContext
CreateProcessA
GetModuleFileNameA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
EncodePointer
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapFree
Sleep
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapAlloc
HeapReAlloc

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ehuyvor
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fe5fc55725803675bf5eb00b15d297d1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 42KB - Virtual size: 41KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 95KB - Virtual size: 123KB

ehuyvor Size: - Virtual size: 4KB

.text
Size: 42KB - Virtual size: 41KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 95KB - Virtual size: 123KB

ehuyvor
Size: - Virtual size: 4KB