ef4738a57105627d0c9480c7e88bfd9341f33337a73818779f08d5a31d05653f

Sharing

Copy URL Twitter E-mail

General

Target

ef4738a57105627d0c9480c7e88bfd9341f33337a73818779f08d5a31d05653f
Size

338KB
MD5

55cbae8f4e23349732bc1e4516013815
SHA1

486148c932a6b03b8a5df2d2359433843e8d5ed0
SHA256

ef4738a57105627d0c9480c7e88bfd9341f33337a73818779f08d5a31d05653f
SHA512

c0220a360449382ce036f8b5e1943767bfb5170f69ed303321dc4310b5c6fb1349bde2c1aef2f787454df8fcdcf74f0a94334db89eead0deb04855068cd20bff
SSDEEP

6144:KBA1viy1u+x50jTv5soWRU4dIcoV4kx6wvM0NlfPf+6yGVslOflelor6:Ezj8RU4dIEkAwUWfX+6YiIor

Score

N/A

Malware Config

Signatures

Files

ef4738a57105627d0c9480c7e88bfd9341f33337a73818779f08d5a31d05653f
.exe windows x86

71862a16caab02b4e280a5a09d0322a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AreFileApisANSI
Beep
BindIoCompletionCallback
CloseHandle
CreateFileA
CreateRemoteThread
CreateTapePartition
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FormatMessageA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
RaiseException
RtlUnwind
SetComputerNameW
SetConsoleCtrlHandler
SetConsoleTitleA
SetFilePointer
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WriteFile
lstrcmpiA

user32

CreateMDIWindowW
EnumDisplayDevicesA
EnumDisplaySettingsW
EnumThreadWindows
FrameRect
GetAltTabInfoW
GetCaretBlinkTime
InflateRect
InsertMenuW
LoadAcceleratorsW
LoadIconW
MapVirtualKeyExA
MessageBoxA
SetMenuItemInfoA
SetWindowsHookExA
wsprintfA

ole32

CoCreateInstance
CoFreeLibrary
CreateILockBytesOnHGlobal
OleConvertIStorageToOLESTREAM
OleDestroyMenuDescriptor
OleDuplicateData

urlmon

ObtainUserAgentString
RegisterMediaTypes
URLDownloadToCacheFileA
URLOpenPullStreamA
URLOpenStreamA

Sections

.text
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71862a16caab02b4e280a5a09d0322a0

Headers

File Characteristics

Imports

kernel32

user32

ole32

urlmon

Sections

.text Size: 35KB - Virtual size: 36KB

.data Size: 13KB - Virtual size: 28KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 281KB - Virtual size: 281KB

.reloc Size: 3KB - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 36KB

.data
Size: 13KB - Virtual size: 28KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 281KB - Virtual size: 281KB

.reloc
Size: 3KB - Virtual size: 4KB