5e53560f5e0bf8c0568193eb348dcc977de744ed4402d820f679f19d9b26eec1

Sharing

Copy URL Twitter E-mail

General

Target

5e53560f5e0bf8c0568193eb348dcc977de744ed4402d820f679f19d9b26eec1
Size

110KB
MD5

21b845f1a13ab44412733aa245a5fbf4
SHA1

ae672930ad5d1483d01426e679eb16a51948741e
SHA256

5e53560f5e0bf8c0568193eb348dcc977de744ed4402d820f679f19d9b26eec1
SHA512

ebd1f075ebe7853d6758209e40274748ffa1c3fa4a34ff6dcb984cd2a9a2cbece5e73336f4f0e0c5de5f3a355fbb90817aaa9f3ba03eba1205f07893eb11c888
SSDEEP

3072:wOTaDTUUJ511F6lvseNejsuujr3bD0Aarmwm:vT8oUvWUeNesucrAtmwm

Score

N/A

Malware Config

Signatures

Files

5e53560f5e0bf8c0568193eb348dcc977de744ed4402d820f679f19d9b26eec1
.exe windows x86

f5ce3558998a6d2f61fa8e06d33dc1c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegOpenKeyExA
DeregisterEventSource
RegDeleteKeyA
InitializeSecurityDescriptor
RegCloseKey
RegDeleteValueA
RegSetValueExA
ReportEventA
SetSecurityDescriptorDacl
RegisterEventSourceA
RegQueryValueExA

kernel32

GetExitCodeThread
SetEvent
GetFileAttributesA
TlsFree
MoveFileA
UnhandledExceptionFilter
CreateSemaphoreA
IsProcessorFeaturePresent
GetSystemInfo
ReleaseMutex
HeapCreate
GetProcessHeap
GetUserDefaultLangID
GetFileSize
FindNextFileA
SetFilePointer
CreateThread
lstrlenA
ReadFileEx
InterlockedIncrement
GlobalFree
OutputDebugStringA
DeleteFileA
lstrcmpA
GlobalMemoryStatus
WaitForSingleObjectEx
LoadLibraryA
HeapDestroy
SetEndOfFile
CreateMutexA
GetTickCount
TerminateProcess
DeleteCriticalSection
HeapFree
WriteFileEx
WaitForSingleObject
WaitForMultipleObjectsEx
CreateDirectoryA
TlsSetValue
GetCurrentThread
InitializeCriticalSection
FindClose
GetModuleHandleA
CloseHandle
MapViewOfFile
ReadFile
EnterCriticalSection
lstrcpyA
LCMapStringW
GetSystemDefaultLangID
GetLocalTime
FindFirstFileA
CopyFileA
ResetEvent
CreateFileA
GetDriveTypeA
IsValidLocale
VirtualQuery
SleepEx
CreateFileMappingA
ExpandEnvironmentStringsA
GetOverlappedResult
GetCurrentThreadId
Sleep
HeapAlloc
TlsAlloc
QueryPerformanceCounter
DebugBreak
CreateEventA
GetDiskFreeSpaceA
ReleaseSemaphore
TlsGetValue
LeaveCriticalSection
QueryPerformanceFrequency
FlushFileBuffers
UnmapViewOfFile
VirtualFree
GetCurrentProcess
GetLastError
GetProcAddress
FreeLibrary
WriteFile
GlobalAlloc
GetCurrentProcessId
GetModuleFileNameA
ReadProcessMemory
SetThreadPriority
VirtualAlloc
RemoveDirectoryA
GetVersionExA

winmm

auxSetVolume

msvcrt

_iob
strpbrk
_beep
malloc
_initterm
_makepath
_adjust_fdiv
_itoa
_stricmp
strtok
exit
_snprintf
fprintf
_ltoa
_splitpath
toupper
strncpy
vprintf
_ftol
atol
rand
swprintf
fclose
isprint
strchr
_beginthread
_strnicmp
time
sprintf
strtoul
memmove
vsprintf
printf
_vsnprintf
wcslen
_chdir
free
_purecall
_onexit
fflush
_ultoa
__dllonexit

Sections

.textbss
Size: 43KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.3text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f5ce3558998a6d2f61fa8e06d33dc1c7

Headers

File Characteristics

Imports

advapi32

kernel32

winmm

msvcrt

Sections

.textbss Size: 43KB - Virtual size: 1.3MB

.text Size: 512B - Virtual size: 472B

.idata Size: 4KB - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 32B

.reloc Size: 512B - Virtual size: 4B

.3text Size: 60KB - Virtual size: 60KB

.textbss
Size: 43KB - Virtual size: 1.3MB

.text
Size: 512B - Virtual size: 472B

.idata
Size: 4KB - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 32B

.reloc
Size: 512B - Virtual size: 4B

.3text
Size: 60KB - Virtual size: 60KB