ea4dac16923cc20d9f6ff71acd295786680c2b0a543d004a632d8603d4385669

Sharing

Copy URL Twitter E-mail

General

Target

ea4dac16923cc20d9f6ff71acd295786680c2b0a543d004a632d8603d4385669
Size

124KB
MD5

642307f8434d14a0118cd7280739fd30
SHA1

6753a54d40b039df5a06e6a93c5b8e1f2b368648
SHA256

ea4dac16923cc20d9f6ff71acd295786680c2b0a543d004a632d8603d4385669
SHA512

6acc42c426ab4e3b68ef77dfd6ea4742fd54d7154456d792e508a7efd348f9c397d1af4bcdd70273bdd87e137c4992253f57b8913b9ea3a4c54c0854ae5860e3
SSDEEP

3072:eAIPIlYC+3Huz4OOOOOOOOOOOOOOOOOOOuq4nZwbFCLjSpufC7x:eAaR+zl4nZwpQjSpg+

Score

N/A

Malware Config

Signatures

Files

ea4dac16923cc20d9f6ff71acd295786680c2b0a543d004a632d8603d4385669
.exe windows x86

45745bee697dbbf99dfb8411c313ec78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetDriveTypeA
GetLogicalDriveStringsA
MoveFileExA
GetFileAttributesA
GetWindowsDirectoryA
GetCommandLineW
ReadFile
GetFileSize
SetFileAttributesA
GetLastError
LocalAlloc
DeleteFileA
LocalFree
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
CreateFileA
WriteFile
WinExec
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
RaiseException

advapi32

CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
QueryServiceConfigA
DeleteService
CloseServiceHandle
CryptAcquireContextA

shell32

CommandLineToArgvW

shlwapi

SHGetValueA
SHSetValueA
SHDeleteValueA
StrStrIA
PathFileExistsA

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

abkhfxg
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

45745bee697dbbf99dfb8411c313ec78

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 79KB - Virtual size: 79KB

abkhfxg Size: - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 79KB - Virtual size: 79KB

abkhfxg
Size: - Virtual size: 4KB