e3fb2f5c052794d6cd35f4b68592cdc9fef7771a3e2400c41c3faaf0302fd41a

Sharing

Copy URL Twitter E-mail

General

Target

e3fb2f5c052794d6cd35f4b68592cdc9fef7771a3e2400c41c3faaf0302fd41a
Size

126KB
MD5

42ecac94e22eebac7b0c6915d3f30d70
SHA1

b4009f9a07a7d0c474020792d17b6056c2bc7578
SHA256

e3fb2f5c052794d6cd35f4b68592cdc9fef7771a3e2400c41c3faaf0302fd41a
SHA512

bef5925aa3ca7d1e152d13a46124874e4675e82d9c373105a8cc3e4960eafae30e09590d61b61cce19c09f0bd95cd5be905a415c7633e8514e322058faec500c
SSDEEP

3072:iQQXxrT+7vC8jQcaEh0nDpqo3coCF8hanFMAp1SWlG:PQX96K8jQqh0nNb3Ws4/SWlG

Score

N/A

Malware Config

Signatures

Files

e3fb2f5c052794d6cd35f4b68592cdc9fef7771a3e2400c41c3faaf0302fd41a
.exe windows x86

ead12569ab5d4fdd8a6554cb5f4b1826

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

user32

wsprintfA

oleaut32

VariantClear

shell32

ShellExecuteExA

kernel32

GetModuleHandleW
SetLastError
GetCurrentThreadId
HeapCreate
HeapDestroy
HeapSize
GetConsoleCP
GetConsoleMode
LCMapStringW
GetProcessHeap
FlushFileBuffers
WriteConsoleW
CreateFileW
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
MoveFileExA
DeleteFileA
Sleep
WaitForSingleObject
WriteFile
GetTempPathA
CloseHandle
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetModuleFileNameA
RaiseException
GetLastError
CreateProcessA
GetProcAddress
WideCharToMultiByte
TlsFree
CreateRemoteThread
OutputDebugStringA
WriteProcessMemory
DuplicateHandle
GetCurrentProcess
GetModuleHandleA
VirtualAllocEx
MultiByteToWideChar
LocalFree
GetTickCount
GetModuleFileNameW
LoadLibraryW
RtlUnwind
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
EncodePointer
HeapAlloc
HeapReAlloc
GetFileType
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
GetEnvironmentStringsW

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ead12569ab5d4fdd8a6554cb5f4b1826

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

user32

oleaut32

shell32

kernel32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 125KB - Virtual size: 128KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 125KB - Virtual size: 128KB