e796ecb1abdcbd75623de6782161fc791041ee7c57d66748e427ec54e2dd4499

Sharing

Copy URL Twitter E-mail

General

Target

e796ecb1abdcbd75623de6782161fc791041ee7c57d66748e427ec54e2dd4499
Size

148KB
MD5

10c26c61f906d1c27b72e1422248ef90
SHA1

f22491cbd51a22e71edc8bbf07d590919a7f1262
SHA256

e796ecb1abdcbd75623de6782161fc791041ee7c57d66748e427ec54e2dd4499
SHA512

8c8b1b06433fb35eb87aafbd40070e5dc43e3df44e6d62eb42cf5475e0d7477c05e4966f4947fa2667f085b927e255ded0d3d70c3110a62689c144e83ed817f7
SSDEEP

1536:Eeg3B+s1HCBiwqs4hKbM6IebDDvMEtDPddrQMov1JoKRunA8Lia+V7wiWnbmYhep:hgx1eI2bDDjPDzo9JuLi6iKbmYovs

Score

N/A

Malware Config

Signatures

Files

e796ecb1abdcbd75623de6782161fc791041ee7c57d66748e427ec54e2dd4499
.exe windows x86

02d4344e4209fa233699d9321bbd3e9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord149

gdi32

CreateDCA
SetRectRgn
DeleteEnhMetaFile
RestoreDC
GetCurrentPositionEx
GetTextMetricsA
CreatePalette
CreateFontW
CreateFontIndirectW
SetROP2
LPtoDP
GetDeviceCaps
GetDIBits
StretchDIBits
GetMapMode
GetBitmapBits
GetWindowOrgEx
SetStretchBltMode
ExtCreatePen
SetTextAlign
CreateDIBSection
SelectPalette
SetViewportExtEx

shlwapi

PathGetCharTypeA

kernel32

GetConsoleMode
CompareStringW
CompareStringA
GetTimeZoneInformation
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetTickCount
GetVersionExA
FormatMessageW
TerminateProcess
lstrlenW
WideCharToMultiByte
ReadFile
GetModuleFileNameW
LoadLibraryA
SetHandleCount
CreateFileW
InterlockedIncrement
HeapFree
GetStringTypeW
GetLastError
HeapAlloc
SetEvent
GetCurrentProcess
SetFilePointer
InterlockedExchange
GetModuleFileNameA
InterlockedCompareExchange
GetFileType
GetCommandLineW
FreeLibrary
TlsGetValue
GetEnvironmentStringsW
CreateFileA
QueryPerformanceCounter
IsDebuggerPresent
DeleteCriticalSection
WaitForSingleObjectEx
FreeEnvironmentStringsW
SetEnvironmentVariableA
Sleep
GetOEMCP
FreeLibraryAndExitThread
LCMapStringW
TlsSetValue
EnterCriticalSection
GetACP
WaitForSingleObject
LeaveCriticalSection
LocalFree
TryEnterCriticalSection
WriteFile
InterlockedDecrement
GetModuleHandleA
GetFileSize
RaiseException
CloseHandle
MultiByteToWideChar
FlushFileBuffers
HeapDestroy
CreateThread
ExitProcess
GetStdHandle
GetProcessHeap
CreateEventW
GetCommandLineA
GetStartupInfoA
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
HeapCreate
VirtualFree
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
InitializeCriticalSection
GetCPInfo
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02d4344e4209fa233699d9321bbd3e9f

Headers

File Characteristics

Imports

msi

gdi32

shlwapi

kernel32

Sections

.text Size: 112KB - Virtual size: 110KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 12KB - Virtual size: 14KB

.sxdata Size: 4KB - Virtual size: 116B

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 112KB - Virtual size: 110KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 12KB - Virtual size: 14KB

.sxdata
Size: 4KB - Virtual size: 116B

.rsrc
Size: 4KB - Virtual size: 3KB