a6ecab95a9dee70ccf1f5a295c05c28d73e98ae6bfdef65bab0972473e6fec55

General

Target

a6ecab95a9dee70ccf1f5a295c05c28d73e98ae6bfdef65bab0972473e6fec55
Size

169KB
MD5

78cceba3d848c5ee1844e30241c88ee0
SHA1

238adfe04ad6508229dd80d74af83c7b01b689de
SHA256

a6ecab95a9dee70ccf1f5a295c05c28d73e98ae6bfdef65bab0972473e6fec55
SHA512

0ab544b348dbd1ee8370bdcdaf0d24fffa974ae14b86a7694fa5dffc1b2b171d8ce23ffc64fc791b6a5fe40e6b3448e8afe10ed411489774a2b9d33eb2f8314a
SSDEEP

3072:y2TzuERB6eeEir8/GREAkbaVUMb+OeVzD9fDVrGOoPi65I4bSzA0o7nWj5:VTz9OeenMlnMUMb+3jGOGi6HSzARny

Score

N/A

Malware Config

Signatures

Files

a6ecab95a9dee70ccf1f5a295c05c28d73e98ae6bfdef65bab0972473e6fec55
.exe windows x86

80a07a9bd744c6a3b09ff7893edecf79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

psapi

GetProcessMemoryInfo

ole32

CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc
CoRevokeClassObject
CoInitialize
CoRegisterClassObject
CoUninitialize
CoTaskMemAlloc
CoCreateInstance
StringFromCLSID

shell32

SHGetFileInfoW

user32

CharUpperW
wsprintfW
PostThreadMessageW
TranslateMessage
KillTimer
SetTimer
GetWindowLongA
GetMessageW
DispatchMessageW
GetDC
CharNextW
UnregisterClassA

gdi32

GetTextMetricsW
GetOutlineTextMetricsW
CreateFontIndirectW
DeleteObject
SelectObject
AddFontResourceExW

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
RegDeleteValueW
RegSetValueExW

kernel32

FillConsoleOutputAttribute
lstrlenW
LockResource
CreateFileMappingW
WideCharToMultiByte
lstrcpyA
GetProcessWorkingSetSize
lstrcmpiW
GetLastError
GetTickCount
EnumResourceNamesW
GlobalAlloc
OutputDebugStringW
MultiByteToWideChar
FreeEnvironmentStringsW
GetCPInfo
GetACP
lstrcpyW
InitializeCriticalSection
FindClose
GlobalFree
GetModuleHandleW

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80a07a9bd744c6a3b09ff7893edecf79

Headers

File Characteristics

Imports

psapi

ole32

shell32

user32

gdi32

advapi32

kernel32

oleacc

Sections

.text Size: 107KB - Virtual size: 106KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 58KB - Virtual size: 58KB

.isete Size: 1024B - Virtual size: 248KB

.text
Size: 107KB - Virtual size: 106KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 58KB - Virtual size: 58KB

.isete
Size: 1024B - Virtual size: 248KB