7cd9bd04e914a576722f78085d6a092a584c700960e2c13436d456b02a2cac0a

Sharing

Copy URL Twitter E-mail

General

Target

7cd9bd04e914a576722f78085d6a092a584c700960e2c13436d456b02a2cac0a
Size

276KB
MD5

68b918bcd611e7c22d764a367209ab4e
SHA1

b04947ed111b3fa61e7c835c68e7a9e67ac894af
SHA256

7cd9bd04e914a576722f78085d6a092a584c700960e2c13436d456b02a2cac0a
SHA512

15831732fda51d84194c94272fda4662294360235104e96815816238069301b6c5f487dccf70cf5a6d2ec4fde6d08a96df520213aa2e8ff7077d056090c4d96c
SSDEEP

6144:+uUj0TfObuXK6Q9t0D07i1Len9Y7rGuMnHQF9:+uUqOkKx9So7i1M27rGup

Score

N/A

Malware Config

Signatures

Files

7cd9bd04e914a576722f78085d6a092a584c700960e2c13436d456b02a2cac0a
.exe windows x86

3a7abe3fe6a272db4509499b60959cbb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
lstrlenA
GetCurrentProcess
OutputDebugStringW
GetCommandLineA
Sleep
GetModuleFileNameW
lstrcatA
lstrlenW
GetLastError
lstrcmpiA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
OutputDebugStringA
lstrcpyA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapFree
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
CompareStringA
MultiByteToWideChar
CompareStringW
SetEnvironmentVariableA
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW

user32

MessageBoxA

shell32

SHGetFileInfoA

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ecisdom
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a7abe3fe6a272db4509499b60959cbb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 143KB - Virtual size: 144KB

ecisdom Size: 21KB - Virtual size: 24KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 143KB - Virtual size: 144KB

ecisdom
Size: 21KB - Virtual size: 24KB