05ed5ad96befb6f91483289705d018e03c474433eff221fcd6524edd9b241584

General

Target

05ed5ad96befb6f91483289705d018e03c474433eff221fcd6524edd9b241584
Size

391KB
MD5

68c3fe3abc77082ef505438bb6946f00
SHA1

8382487425250368144d1ff0a43dc5ba1425e51e
SHA256

05ed5ad96befb6f91483289705d018e03c474433eff221fcd6524edd9b241584
SHA512

306a8be58b18234a25c06461adec146bf2636fa0338f6b5f0ca935c2f5d65917448f480cca784d2c52c07e930c1dd624fd5c2417ca66cce846fbf0b4fe9c2109
SSDEEP

6144:jOLYbgnpJGseASRaPNi8BbrTrWLUpo8zZTLShT2RBrmLWp/3H4zxMA6:wnrLeCNigbrTrpo8zx+NSB6Wl3Hur6

Score

N/A

Malware Config

Signatures

Files

05ed5ad96befb6f91483289705d018e03c474433eff221fcd6524edd9b241584
.exe windows x86

131ceeafde7794d8a506e5a5446b2bfd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

sxs

SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW

shell32

IsLFNDrive
PathIsExe
SHAlloc
ShellAboutW
SHAppBarMessage

kernel32

HeapCreate
GetWindowsDirectoryW
MulDiv
GetConsoleMode
_lopen
FindClose
GetACP
LZRead
MulDiv
MulDiv
GetMailslotInfo
GetConsoleTitleA
GlobalFree
DeleteAtom
MulDiv
MulDiv
MulDiv
GlobalFree
DeleteFiber
EnterCriticalSection
RtlUnwind
IsBadReadPtr
SetStdHandle
GlobalFix
EncodeSystemPointer
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
Beep
ConvertFiberToThread
EncodePointer
HeapWalk
LCMapStringW
LCMapStringA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 382KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

131ceeafde7794d8a506e5a5446b2bfd

Headers

File Characteristics

Imports

sxs

shell32

kernel32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 492KB

.rsrc Size: 382KB - Virtual size: 384KB

.DATA Size: 512B - Virtual size: 8KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 492KB

.rsrc
Size: 382KB - Virtual size: 384KB

.DATA
Size: 512B - Virtual size: 8KB