eb9f50fd715a1f49a7feb34b5959f0c4248b4694121fe0704435efd2e211d95f

Sharing

Copy URL Twitter E-mail

General

Target

eb9f50fd715a1f49a7feb34b5959f0c4248b4694121fe0704435efd2e211d95f
Size

336KB
MD5

8256130b99678630639ac1c74304c986
SHA1

a3ae1138be5f92eb3a6cb11e70437417ac212fa3
SHA256

eb9f50fd715a1f49a7feb34b5959f0c4248b4694121fe0704435efd2e211d95f
SHA512

eca43867fb22e38ab7a8a37beeb70e3c41a29ffd9b8bc6bb225210c21a98a8baad043f42cd019c81a571b06d90e80cd1bb626b7e6ce05f6bd78d3b0ddc83a6ad
SSDEEP

6144:2AVk7hwpQdVkoOFqrbdCjPiMfvl7NOKSJzz2tElEgUxtRHXk70/OHMQUnFgoEj:rVmhxgoOFadMPHvl7Qxr2xvX6MQUaoE

Score

N/A

Malware Config

Signatures

Files

eb9f50fd715a1f49a7feb34b5959f0c4248b4694121fe0704435efd2e211d95f
.exe windows x86

a68105b2ea14e0914d899ad5d32b1c32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamW
MoveWindow
WinHelpW
DestroyIcon
SetDlgItemTextW
ScreenToClient
LoadStringW
CharNextW
SetWindowTextW
CreateDialogParamW
RegisterDeviceNotificationW
CharNextA
SendMessageW
SystemParametersInfoW
SendDlgItemMessageW
GetWindowRect
EndDialog
GetSystemMetrics
ShowWindow
GetDlgItem

kernel32

GetLastError
lstrcmpW
GetModuleHandleA
MultiByteToWideChar
lstrcatW
lstrcpyW
GetProcAddress
LoadLibraryW
GetLocaleInfoW
GetModuleHandleW
SetUnhandledExceptionFilter
InterlockedExchange
GetSystemPowerStatus
LocalAlloc
UnhandledExceptionFilter
lstrcpynW
CreateFileW
GetModuleFileNameW
GetWindowsDirectoryW
lstrlenW
FormatMessageW
CloseHandle
GetCurrentProcess
DeviceIoControl
DisableThreadLibraryCalls
GetDateFormatW
GetVersionExA
LocalFree
TerminateProcess

ntdll

LdrUnloadDll
NtAllocateVirtualMemory

audiodev

DllGetClassObject

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

advapi32

RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW

Sections

.text
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a68105b2ea14e0914d899ad5d32b1c32

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

ntdll

audiodev

setupapi

advapi32

Sections

.text Size: 299KB - Virtual size: 298KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 10KB - Virtual size: 3.4MB

.rsrc Size: 22KB - Virtual size: 22KB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 299KB - Virtual size: 298KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 10KB - Virtual size: 3.4MB

.rsrc
Size: 22KB - Virtual size: 22KB

.tls
Size: 512B - Virtual size: 4KB