2ec475ef8480cefe7c944860784cdbb23b22b2852e581c1f250bbaa8d91e69b4

Sharing

Copy URL Twitter E-mail

General

Target

2ec475ef8480cefe7c944860784cdbb23b22b2852e581c1f250bbaa8d91e69b4
Size

264KB
MD5

a39d1f9ce6606fd2879598664a1bdef0
SHA1

d8aafff5041f073c8afeea2c9312c921d4af0a6d
SHA256

2ec475ef8480cefe7c944860784cdbb23b22b2852e581c1f250bbaa8d91e69b4
SHA512

2e0a49e4994c575aa57ad3b450430688215601de65d2ae5bbf9b5ebef26626b09d49e0b5dcdc49b6636a13d5f05ec10b5ec12d24947908e4370ee951b0ac2d1c
SSDEEP

6144:rrlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:3oZ8qpUwufw8T6XLNhcwHWntbbK

Score

N/A

Malware Config

Signatures

Files

2ec475ef8480cefe7c944860784cdbb23b22b2852e581c1f250bbaa8d91e69b4
.exe windows x86

ee238bb9626547eef1d88167d0d6cf8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA

kernel32

CreateMutexA
WaitForSingleObject
GetACP
GetModuleFileNameA
GetFileAttributesA
MultiByteToWideChar
lstrcmpiA
LoadLibraryW
GetProcAddress

advapi32

RegEnumValueA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegSetValueExA

oleaut32

UnRegisterTypeLi
LoadTypeLibEx

iphlpapi

DeleteIpForwardEntry
SetIpStatistics
InternalGetIpNetTable
GetAdaptersInfo
GetFriendlyIfIndex
InternalDeleteIpNetEntry
DeleteIpNetEntry

adsnt

DllGetClassObject

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.blKQTV
Size: 5KB - Virtual size: 911KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 97KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tg
Size: 2KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 120KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WDjuG
Size: 4KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee238bb9626547eef1d88167d0d6cf8e

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

oleaut32

iphlpapi

adsnt

Sections

.text Size: 16KB - Virtual size: 16KB

.blKQTV Size: 5KB - Virtual size: 911KB

.rdata Size: 1024B - Virtual size: 9KB

.edata Size: 97KB - Virtual size: 182KB

.Tg Size: 2KB - Virtual size: 71KB

.data Size: 6KB - Virtual size: 254KB

.edata Size: 120KB - Virtual size: 216KB

.WDjuG Size: 4KB - Virtual size: 729KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 16KB

.blKQTV
Size: 5KB - Virtual size: 911KB

.rdata
Size: 1024B - Virtual size: 9KB

.edata
Size: 97KB - Virtual size: 182KB

.Tg
Size: 2KB - Virtual size: 71KB

.data
Size: 6KB - Virtual size: 254KB

.edata
Size: 120KB - Virtual size: 216KB

.WDjuG
Size: 4KB - Virtual size: 729KB

.rsrc
Size: 10KB - Virtual size: 9KB