ebe93aca3088bbe464404f1189d560e60aaade7778e4a33fd855d2869af46745

Sharing

Copy URL Twitter E-mail

General

Target

ebe93aca3088bbe464404f1189d560e60aaade7778e4a33fd855d2869af46745
Size

236KB
MD5

04680cf669e0a3ce68a410d903d12d20
SHA1

109e4e845a20d557cd3aaf22f0ca5ac9f5975199
SHA256

ebe93aca3088bbe464404f1189d560e60aaade7778e4a33fd855d2869af46745
SHA512

4abc6f942698c7279cf009df91de8df98809ee225029454c76ed48382819b8527d80de23121229ebbb1d072acd297154bb6c63cc76ee212d123ee17bfde23086
SSDEEP

6144:0b1jqG0zHYWe+IxCrn2YddvHCcvlS4Zy4ULC1L:0b83pe3xC7JHXvlSv4/

Score

N/A

Malware Config

Signatures

Files

ebe93aca3088bbe464404f1189d560e60aaade7778e4a33fd855d2869af46745
.exe windows x86

14dad7e163043c70656cfac31445c94c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA

kernel32

Sleep
GetLastError
GetProcAddress
GetPrivateProfileStringA
LoadLibraryA
WritePrivateProfileStringA
GetModuleFileNameA
OutputDebugStringA
DeleteFileA
SetCurrentDirectoryA
CreateMutexA
CloseHandle
WaitForSingleObject
SetEvent
InitializeCriticalSection
CreateEventA
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryA
DeleteCriticalSection
CreateThread
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetFileAttributesA
ResetEvent
GetCommandLineA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
HeapSize

user32

ShowWindow
IsWindow
DispatchMessageA
CloseWindow
LoadIconA
DestroyWindow
PostQuitMessage
WaitMessage
TranslateMessage
SetWindowLongA
GetWindowLongA
CreateWindowExA
PeekMessageA
DefWindowProcA

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

shell32

SHGetSpecialFolderPathA

wininet

HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetCloseHandle
InternetConnectA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

14dad7e163043c70656cfac31445c94c

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

shell32

wininet

Sections

.text Size: 119KB - Virtual size: 118KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 80KB - Virtual size: 84KB

.text
Size: 119KB - Virtual size: 118KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 80KB - Virtual size: 84KB