ef557fe72b9a944c5cfd8a9c58e6a59e21afa76d205e4c21e9fe7c3295358fd3

Sharing

Copy URL

Twitter E-mail

General

Target

ef557fe72b9a944c5cfd8a9c58e6a59e21afa76d205e4c21e9fe7c3295358fd3
Size

195KB
MD5

59f43e09e05bfc213edd52103f3402a1
SHA1

9881438e96f227b274b0ebf5ebe024d0edfca54a
SHA256

ef557fe72b9a944c5cfd8a9c58e6a59e21afa76d205e4c21e9fe7c3295358fd3
SHA512

43e99d2f053574a588f30fd346c1305d26a4d84e1b50c2559629d6215cadc8c915468c003761c7184aa2c1457ffa469cdf057d97f135f9e4573e40069db83c4d
SSDEEP

3072:phP14L5qofDuX79aqTKVhqhmAumOhk47ms5M1QceqovGDK3nev1ghVkKoAbkk6sB:nP14LUofWv1Qceqo8dv1YpoAb76sIBKh

Score

N/A

Malware Config

Signatures

Files

ef557fe72b9a944c5cfd8a9c58e6a59e21afa76d205e4c21e9fe7c3295358fd3
.exe windows x86

1aff7d64fc46ff5cb195c181f6182ef3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmDisableIME

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

FormatMessageW
GetModuleFileNameW
ExitThread
SetLastError
LocalFree
FindFirstFileW
FreeLibrary
GetTickCount
GetSystemDirectoryW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
MultiByteToWideChar
GetProcAddress
EnterCriticalSection
FindClose
DeleteCriticalSection
LocalAlloc
SetFilePointer
WriteFile
Sleep
FlushFileBuffers
CreateMutexW
OpenMutexW
ReleaseMutex
WideCharToMultiByte
GetCommandLineW
GetCurrentProcess
GetModuleHandleW
GetCurrentProcessId
GetStartupInfoW
HeapFree
HeapAlloc
FileTimeToLocalFileTime
GetDriveTypeW
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
VirtualAlloc
GetFullPathNameW
GetCurrentDirectoryA
LCMapStringA
LCMapStringW
RaiseException
RtlUnwind
HeapSize
GetConsoleCP
GetConsoleMode
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetDriveTypeA
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetCurrentThreadId
GlobalFree
GetLastError
FileTimeToSystemTime
WaitForSingleObject
CreateProcessW
HeapReAlloc

user32

MessageBoxW

advapi32

GetSecurityDescriptorSacl
RegCloseKey
RegOpenKeyExW
GetSidLengthRequired
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeAcl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAceEx
RegCreateKeyExW
RegQueryValueExW

shell32

ShellExecuteW

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.drdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1aff7d64fc46ff5cb195c181f6182ef3

Headers

DLL Characteristics

File Characteristics

Imports

imm32

version

kernel32

user32

advapi32

shell32

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 7KB - Virtual size: 6KB

.drdata Size: 68KB - Virtual size: 68KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 7KB - Virtual size: 6KB

.drdata
Size: 68KB - Virtual size: 68KB