4ee1469f7e23dab24cec9f5e33f4412a[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

4ee1469f7e23dab24cec9f5e33f4412a.exe
Size

538KB
MD5

4ee1469f7e23dab24cec9f5e33f4412a
SHA1

3e0e749ef2bb6c5cb02ae78d9493f17bffd9b734
SHA256

1eccbdefba2e01b0f5b470d3881f7dc3b3c488d42f5ddbb7c72474dd11a011cb
SHA512

9b51f6d33d471c48ae40400d14bc31fde949cc39d90c4a9e0b305a586ea84a1767972a66b10afd970eba4c73df50ba8d40b356581728dcf599429d86f5909e83
SSDEEP

12288:PNv1HWSpJ6N+ewwhCyxXjYEH3ndTRD7Mhc0ZdQtPqnAFu6:Px12c6UeKyF0E3zvwHPQwnAY

Score

N/A

Malware Config

Signatures

Files

4ee1469f7e23dab24cec9f5e33f4412a.exe
.exe windows x86

2ca51081a11403485c51b862a1f5baa0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
CreateFileW
CloseHandle
HeapReAlloc
HeapSize
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetProcessHeap
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
lstrcmpiW
CompareStringW
HeapFree
HeapAlloc
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
WriteFile
GetStdHandle
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RtlUnwind
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetModuleHandleW
ExitProcess
GetModuleFileNameW
Sleep
LCMapStringW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DecodePointer

user32

GetMessageA
DispatchMessageA
GetMenu
LoadCursorA
DestroyWindow
SetWindowPos
CheckRadioButton
SetActiveWindow
EndDialog
GetSystemMetrics
CreatePopupMenu
DialogBoxParamA
TrackPopupMenu
wsprintfA
GetActiveWindow
IsWindow
OpenClipboard
TranslateAcceleratorA
GetDlgItemTextA
SetTimer
RedrawWindow
DestroyIcon
IsDialogMessageA
SetMenuItemInfoA
SetWindowLongA
ClientToScreen
CloseClipboard
CallWindowProcA
DestroyAcceleratorTable
EmptyClipboard
GetWindowTextA
LoadAcceleratorsA
GetSystemMenu
SetWindowPlacement
wvsprintfA
SetWindowTextA
MessageBoxA
MoveWindow
EnumClipboardFormats
IsDlgButtonChecked
RegisterClassA
DestroyMenu
SetFocus
TranslateMessage
GetClipboardData
SendDlgItemMessageA
GetClassInfoA
SetDlgItemTextA
SendMessageA
SetClipboardData
SetCursor
LoadIconA
CharUpperA
AppendMenuA
CheckMenuItem
GetClientRect
GetDlgItem
UnregisterClassA
KillTimer
CheckDlgButton
PostQuitMessage
GetSysColorBrush
FindWindowA
InsertMenuItemA
DefDlgProcA
GetCursorPos
EnableWindow
GetWindowLongA

gdi32

SelectObject
GetStockObject
SetBkMode
CreateFontIndirectA
DeleteObject
GetObjectA
SetTextColor

shell32

ShellExecuteW

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 290KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ca51081a11403485c51b862a1f5baa0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 128KB - Virtual size: 127KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 290KB - Virtual size: 293KB

.rsrc Size: 90KB - Virtual size: 89KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 128KB - Virtual size: 127KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 290KB - Virtual size: 293KB

.rsrc
Size: 90KB - Virtual size: 89KB

.reloc
Size: 4KB - Virtual size: 4KB