ef84832d2dc05fed80541b4b79a5e12c77d9254945eb23c3330b82ccb66dc669

Sharing

Copy URL

Twitter E-mail

General

Target

ef84832d2dc05fed80541b4b79a5e12c77d9254945eb23c3330b82ccb66dc669
Size

344KB
MD5

53b328a9ee0ae528613f932530c3f415
SHA1

2ba6c5a31b836fee86947f3cf8bd714771f5c849
SHA256

ef84832d2dc05fed80541b4b79a5e12c77d9254945eb23c3330b82ccb66dc669
SHA512

5004f4ad5bd941670f71dbc2aa278a5fd3e700e3bfd5ca2cc9bb3b6533292c1d8dd084557dd923ff22b06dc05a66b6087c7f94e9ff171d2d5c28e55434ba26e4
SSDEEP

6144:9Nvs7bz/oxcPFEJUEmxlzG2c95aBTFGTpCJt06d8cHeM/P6zHHjjAHs6fvgjwj9w:D07v/EFmhxAlaHGpy0a8c+seHDiSwO

Score

N/A

Malware Config

Signatures

Files

ef84832d2dc05fed80541b4b79a5e12c77d9254945eb23c3330b82ccb66dc669
.exe windows x86

6b087ed7b21f3bc7b33686deaa703d8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
SetErrorMode
WinExec
lstrcatA
GetSystemDirectoryA
TerminateProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
ExpandEnvironmentStringsA
Sleep
GetVersionExA
lstrlenA
lstrcpynA
CloseHandle
LocalAlloc
LocalFree
GetProcAddress
GetModuleFileNameA
FreeLibrary
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
VirtualFreeEx
TerminateThread
IsBadWritePtr
GetLocalTime
MultiByteToWideChar
WideCharToMultiByte
SetLastError
WriteFile
SetFilePointer
CreateFileA
SetFileAttributesA
CreateFileW
ReadFile
GetFileSize
lstrcmpiA
GetLastError
GetFileAttributesA
OpenProcess
lstrcatW
DeleteFileW
GetTempFileNameW
ExpandEnvironmentStringsW
DeviceIoControl
SetEndOfFile
FlushFileBuffers
LoadLibraryExA
DeleteFileA
SystemTimeToFileTime

user32

GetMessageA
DispatchMessageA
SetTimer
wsprintfA
KillTimer
TranslateMessage

ws2_32

WSAStartup
send
socket
gethostbyname
closesocket
htons
connect
recv

iphlpapi

GetAdaptersInfo

msvcrt

??3@YAXPAX@Z
memset
_except_handler3
wcslen
strncpy
memcpy
__CxxFrameHandler

advapi32

OpenSCManagerA
CloseServiceHandle
CreateServiceA
StartServiceA
DeleteService

ntdll

NtQueryInformationFile
NtQueryVolumeInformationFile
NtAllocateVirtualMemory
ZwQueryIntervalProfile
RtlNtStatusToDosError
ZwQuerySystemInformation
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlEqualUnicodeString
RtlFreeUnicodeString
RtlAdjustPrivilege

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b087ed7b21f3bc7b33686deaa703d8f

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

iphlpapi

msvcrt

advapi32

ntdll

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 265KB - Virtual size: 265KB

.vmp0 Size: 51KB - Virtual size: 51KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 265KB - Virtual size: 265KB

.vmp0
Size: 51KB - Virtual size: 51KB