ef654605cffc3348731b64c214067aeb520d9af94133f34a23074746b9608511

General

Target

ef654605cffc3348731b64c214067aeb520d9af94133f34a23074746b9608511
Size

152KB
MD5

07e2acf4ee54420b773820b777145990
SHA1

412452d3675d5dd826139e211b52d5fa3e4730db
SHA256

ef654605cffc3348731b64c214067aeb520d9af94133f34a23074746b9608511
SHA512

356aeeec42bafe3f0f0f37d16007bff612a963e26793273269fd4f15f4e2dce98e8a5a7334b1192d027bb982e55229b9835c4bfccb39a832bb1f0267e77abe1e
SSDEEP

768:VI++xIc+2KjwjTs/hwovRy1IA88Gh0o2hFEOSOnVK3FNbFHupTYfxkXls4U:/1c+QjBovRqSB3rFdK24U

Score

N/A

Malware Config

Signatures

Files

ef654605cffc3348731b64c214067aeb520d9af94133f34a23074746b9608511
.exe windows x86

a824301cacb0024ec5a480b1ffbd626c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
OpenEventA
CloseHandle
Sleep
VirtualAlloc
OpenMutexW
ReadFile
GetTickCount
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetProcAddress
GetLastError
RemoveDirectoryA
FindClose
GetModuleHandleW
PulseEvent
TerminateThread
FlushFileBuffers
GetStringTypeW
SuspendThread
InterlockedExchange
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
SetFilePointer
SetStdHandle
MultiByteToWideChar
LCMapStringA

user32

LoadBitmapW
ShowWindow
EnableWindow
LoadCursorA

gdi32

CreatePen
SelectObject
CreateBitmap

advapi32

CryptAcquireContextW
OpenServiceW

winmm

auxSetVolume

avifil32

AVIFileAddRef

winscard

SCardForgetReaderW

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a824301cacb0024ec5a480b1ffbd626c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

winmm

avifil32

winscard

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 28KB - Virtual size: 29KB

.rsrc Size: 92KB - Virtual size: 88KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 28KB - Virtual size: 29KB

.rsrc
Size: 92KB - Virtual size: 88KB