5e93cfd346a8e56a13ac2a87f82020a258fd7907184ee312251edafe27877881

Sharing

Copy URL Twitter E-mail

General

Target

5e93cfd346a8e56a13ac2a87f82020a258fd7907184ee312251edafe27877881
Size

56KB
MD5

83b76d21c03b74a82b9ae3b53da41880
SHA1

b2e155a97bca375c865368c08b49ef4887b06052
SHA256

5e93cfd346a8e56a13ac2a87f82020a258fd7907184ee312251edafe27877881
SHA512

da280eb2574fb5be4ba72b57d4a473a4a4af9b283e5d261be085f42be876a2b9e0a1f2512887fd6c3ab7b667866899113aa94b34e3d640d257ae1a65ec3fb1c4
SSDEEP

1536:LXNfiwaCXkR4eRclUw1yAXWLHC7MBGTCZ5vPCdRl:LSiHlPmLHcatPC

Score

N/A

Malware Config

Signatures

Files

5e93cfd346a8e56a13ac2a87f82020a258fd7907184ee312251edafe27877881
.exe windows x86

a2888c1c669df960fa9bf31a11ecc7ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
TraceMessage

kernel32

SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InterlockedDecrement
InterlockedIncrement
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetVersion
GetLastError
WaitForSingleObject
CreateEventW
CreateProcessW
SetEvent
CompareStringW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
HeapDestroy
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc

user32

SendMessageW
FindWindowW
UnregisterClassA

msvcrt

_ismbblead
??3@YAXPAX@Z
memset
_vsnwprintf
memcpy_s
_CxxThrowException
_wcsicmp
_vscwprintf
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_controlfp
_XcptFilter
_exit
_cexit
__getmainargs
free
??_U@YAPAXI@Z
??_V@YAXPAX@Z
wcschr
??2@YAPAXI@Z
__CxxFrameHandler3
wcstok
memmove_s
vswprintf_s

oleaut32

SysAllocString
SysFreeString

shlwapi

StrRStrIW

ole32

CreateBindCtx
CoRegisterClassObject
CLSIDFromString
CoUninitialize
CoInitializeEx
CoCreateInstance
CoRevokeClassObject

setupapi

SetupDiOpenDevRegKey
SetupDiOpenDeviceInterfaceW
SetupDiGetClassDevsExW
SetupDiGetDeviceInterfaceAlias
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

shell32

ord155
ShellExecuteExW
SHParseDisplayName

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ouopaxt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a2888c1c669df960fa9bf31a11ecc7ab

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

oleaut32

shlwapi

ole32

setupapi

shell32

Sections

.text Size: 23KB - Virtual size: 23KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 29KB - Virtual size: 30KB

ouopaxt Size: - Virtual size: 4KB

.text
Size: 23KB - Virtual size: 23KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 29KB - Virtual size: 30KB

ouopaxt
Size: - Virtual size: 4KB