fe9008dd70e6313c786baf7a521d7e7e0da9dbb85ca4a28c0fb6090816e36bab

Sharing

Copy URL Twitter E-mail

General

Target

fe9008dd70e6313c786baf7a521d7e7e0da9dbb85ca4a28c0fb6090816e36bab
Size

248KB
MD5

08cb101012f67ffad03ffefa6c3d8570
SHA1

105d6b16788064b4b2a07f416ba940b24e284ce9
SHA256

fe9008dd70e6313c786baf7a521d7e7e0da9dbb85ca4a28c0fb6090816e36bab
SHA512

cbe05f52b13ac3107abf4cc5087c48028cf119bda410746ac77c7d9ca885dd0d59341541311494273adda0393d8218141f79bba0b8df40b0f15708d33455ba70
SSDEEP

6144:yV5EGAxjGtyjHW1EPUXYuwe/SYFdsXx0J6ItxPvC:y3EpGtmHWicXYuFF/J6Ii

Score

N/A

Malware Config

Signatures

Files

fe9008dd70e6313c786baf7a521d7e7e0da9dbb85ca4a28c0fb6090816e36bab
.exe windows x86

e2efaa4371133cfc94fb102e6de0ce67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
lstrcatA
GetCurrentProcess
SetPriorityClass
WriteFile
SetEndOfFile
SetFilePointer
ReadFile
CreateFileA
HeapFree
CloseHandle
lstrlenA
GetVersionExA
SetEnvironmentVariableA
GetLocaleInfoW
LoadLibraryA
GetCurrentThread
SetThreadPriority
SetLastError
GetSystemTime
GetLastError
HeapAlloc
GetSystemDirectoryA
GetOEMCP
GetWindowsDirectoryA
UnhandledExceptionFilter
FreeEnvironmentStringsA
SetStdHandle
IsBadCodePtr
GetACP
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
TerminateProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
FlushFileBuffers
SetUnhandledExceptionFilter
HeapSize
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
GetStringTypeW
IsBadReadPtr
GetProcAddress
GetTimeZoneInformation
GetStringTypeA

user32

wsprintfA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegCloseKey

shell32

ShellExecuteExA
SHChangeNotify

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2efaa4371133cfc94fb102e6de0ce67

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 124KB - Virtual size: 121KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 20KB - Virtual size: 23KB

.rsrc Size: 80KB - Virtual size: 88KB

.text
Size: 124KB - Virtual size: 121KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 20KB - Virtual size: 23KB

.rsrc
Size: 80KB - Virtual size: 88KB