eb78ab94dec56fdb5fab9bc379312af8a18c8d28650c8f26e11f0afcabe4ff07

Sharing

Copy URL Twitter E-mail

General

Target

eb78ab94dec56fdb5fab9bc379312af8a18c8d28650c8f26e11f0afcabe4ff07
Size

77KB
MD5

0402a3c7da28dcd95492acc5fcfe0701
SHA1

937eb0bf38c6d5d2d9c28e01f23c1930f889eeb0
SHA256

eb78ab94dec56fdb5fab9bc379312af8a18c8d28650c8f26e11f0afcabe4ff07
SHA512

3e64ed54e7fdee06f694644e9fbe2fcbfa373cb961ab8179c52934760e76c45d14787cc2996f63eb252559bcd714990e6e77950c4b85e92bb13635b8b11736a8
SSDEEP

1536:AiQgzHtbYeQi4C9bnWe7z9EQ3G2e7JqSbk4p:lQgzHaCNhWSGXVqz4p

Score

N/A

Malware Config

Signatures

Files

eb78ab94dec56fdb5fab9bc379312af8a18c8d28650c8f26e11f0afcabe4ff07
.exe windows x86

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCapture
FrameRect
GetActiveWindow
GetClassInfoA
GetMenu

kernel32

lstrcmpA
lstrcatA
GetCurrentThreadId
FormatMessageA
GlobalDeleteAtom
GetCommandLineA
GetThreadLocale
FreeResource
HeapFree
GetCurrentProcessId
SetThreadLocale
HeapDestroy
WriteFile
GetEnvironmentStrings
Sleep
GetSystemDefaultLangID
GlobalAlloc
MoveFileExA
IsBadReadPtr
GetCPInfo
GetStringTypeA
GetFileSize
GetDateFormatA
lstrcpynA
SetFilePointer
GetModuleHandleA
GetACP
HeapAlloc
ExitProcess
LockResource
GetModuleFileNameA
GetFullPathNameA
LocalAlloc
GetStringTypeW
DeleteFileA
SetErrorMode
ExitThread
IsBadHugeReadPtr
WideCharToMultiByte
FindFirstFileA
GetUserDefaultLCID
GetVersionExA
InitializeCriticalSection
FindResourceA
LoadLibraryA
GetCurrentProcess
lstrlenA
DeleteCriticalSection
GetOEMCP
MoveFileA
CreateEventA
GetCommandLineW
VirtualAllocEx
GetLastError
SetHandleCount

comctl32

ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Add

gdi32

SetPixel
CopyEnhMetaFileA
CreateDIBitmap
SetBkColor

Exports

Exports

g0Oaj
_z5GeDLM@20
erEFDy
zwMSPbqRRTUNo
_sjKoqk_5pxln5@4
_ZQadjDUaug
lFe5j8wORwk@4
pmLPa@16
_NL0O_Vv@12
6y5i_Rs@8
_0_Qz4Bnq6pVDni@12
_aLlzzt_B@4
qdrbZ@4
_tlZ61Ed5@20
_2wVLeetDs
_iHoN1
eiQyF@24
vGbDutBN5vA
uDfCr_qKV@8
6DcG_R@4
_uAwjE9H@8
_Ozqlygf@8
_KMJ9w7cu
_c7N327FoK4m@24
QWd5RYQ
_DQ_4JzTNaEp6V
A5KsPNpR6AuR
AYvAre0@20
_HqdPVMFW6jKkk
_Og95dtr1HEi
_VlRBFY9o8HflR6
_WJ6r6PW
_4zwMjl8ZLq5q
_6w3juKVQ
_Kjaxc6w4w@20
_BqREHTkE84ZeN6@24
1wUbW@20
qJF0D6YnV9
_LmYYoc1G
BgBdtud@24
_8MNgEX
P4XjqYj0ZC@16
38_bt
l9xLjnC2qEmMfw
IoIOSx9xHkE5
_Fspaa5aVexX6F@16
PHhtt7OlknkzWK@16
_zOOxKL
HVdV4ineJqC1
tD0Tx3@24
_enGbgZ3VHa@20
f6ob1u7S
tTBZL0HO@24
PpXtVKCqEWywoR
wIc7T3rrfNrmgA
_pr1JXszF3yYNsF
_LMTyAfZR@20
_iFTcsP@16
AhLorke@12
_aUwfJvIuSD@16
0nlUFdTq@24
_JQJ0wiO2TLs_6@20
___JuamE
_75xXuw1xZS@24
9l0KCzaiXd@24
fEx95FDwg89J

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kldata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

Imports

user32

kernel32

comctl32

gdi32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 12KB

.DATA Size: 10KB - Virtual size: 30KB

.kldata Size: 48KB - Virtual size: 47KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.DATA
Size: 10KB - Virtual size: 30KB

.kldata
Size: 48KB - Virtual size: 47KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB