ea4a94b049123d239507e6d21913a131cc6eea9a4a7b1a8d972eedc1e107649d

Sharing

Copy URL Twitter E-mail

General

Target

ea4a94b049123d239507e6d21913a131cc6eea9a4a7b1a8d972eedc1e107649d
Size

165KB
MD5

149e939a057d269a1c52cb5335b16c31
SHA1

b60f8248b8887e4a00b810933494c9bf1fe88724
SHA256

ea4a94b049123d239507e6d21913a131cc6eea9a4a7b1a8d972eedc1e107649d
SHA512

3424503423e8ab19d40e0c4c5d43cefc9c57d1065b684412a3fa559c6fd40dbcf2b2c73b5a733dd8aac4079ee7285f653195d5575fa28cf54c56ce796509beaf
SSDEEP

3072:DaXVMFnJGjXCnqauvQcxd/EV8aCVkxFxH0:+XVMOrwqsEpEV8aCqx7U

Score

N/A

Malware Config

Signatures

Files

ea4a94b049123d239507e6d21913a131cc6eea9a4a7b1a8d972eedc1e107649d
.exe windows x86

4e322efbc86bee447eeb310fb8a05c74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractAssociatedIconA
ExtractAssociatedIconW
ShellExecuteExA
ShellExecuteA
ExtractIconW
ShellAboutA
FindExecutableA

ole32

CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
OleConvertIStorageToOLESTREAM

advapi32

RegRestoreKeyA
LookupPrivilegeValueA
ImpersonateSelf
SetPrivateObjectSecurityEx
GetSecurityDescriptorGroup
GetSidIdentifierAuthority
RegQueryInfoKeyA
OpenServiceA

kernel32

EnterCriticalSection
HeapAlloc
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapReAlloc
LoadLibraryW
RtlUnwind
HeapSize
SetLastError
MoveFileW
PulseEvent
OpenFile
EnumUILanguagesA
SetCommMask
GetCommandLineW
FindFirstChangeNotificationW
MultiByteToWideChar
InterlockedDecrement
GetCPInfo
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
GetCurrentThreadId
GetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapFree
WideCharToMultiByte
LCMapStringW
GetStringTypeW
Sleep
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xzmxbfv
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4e322efbc86bee447eeb310fb8a05c74

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

advapi32

kernel32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 16KB

.rsrc Size: 124KB - Virtual size: 125KB

xzmxbfv Size: - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 16KB

.rsrc
Size: 124KB - Virtual size: 125KB

xzmxbfv
Size: - Virtual size: 4KB