efec92dd22223aafeedd711a02c6a52e0d1f48550f9189d307a810fb8beed38a

General

Target

efec92dd22223aafeedd711a02c6a52e0d1f48550f9189d307a810fb8beed38a
Size

160KB
MD5

0a418ee0e7176f4672a1429b17c534e6
SHA1

43f8cba1025d700d910970e047bf17c2e9a42f3f
SHA256

efec92dd22223aafeedd711a02c6a52e0d1f48550f9189d307a810fb8beed38a
SHA512

66c7546e42dbc8c1b7a01a04f5486cdcda500116a7f6f6c1a05ae519d1d606ebac6257ab16804e31d60400be79eca1635bbc04e7ec4467428250c783bef075c9
SSDEEP

3072:4oZHFyUHxt5TU+aNXz4FVDBHxG1W32rBymIBliw+9Jtr1ZnG6mP0Au0j:dFVDvKB7sA7JtZ5

Score

N/A

Malware Config

Signatures

Files

efec92dd22223aafeedd711a02c6a52e0d1f48550f9189d307a810fb8beed38a
.exe windows x86

7466e2b9f0f8ecf4f5397349739d1d74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetLastActivePopup
GetSystemMetrics
GetWindowThreadProcessId
GetSysColor
GetCapture
SystemParametersInfoA
UpdateWindow
LoadIconA
ShowCursor
IsWindowEnabled
SetCursor
RemoveMenu
GetWindowTextA
DefWindowProcA
ScrollWindow
GetKeyState
FindWindowA
GetActiveWindow
GetTopWindow
RedrawWindow
GetCursorPos
DeleteMenu
PeekMessageA
LoadCursorA
GetSysColorBrush
GetDesktopWindow

kernel32

GetTempPathW
GetCurrentProcess
GetVersionExW
GetUserDefaultLangID
GetThreadLocale
SetErrorMode
GetOEMCP
GetStartupInfoW
GetCommandLineW
GetModuleHandleW
RtlUnwind
GetModuleHandleA
GetFileAttributesA
CreateFileMappingA
VirtualProtect
MultiByteToWideChar
RaiseException
lstrcpyA

msvcrt

exit
realloc
__getmainargs
strncmp
malloc
atoi
_initterm
_onexit
__setusermatherr
_XcptFilter
_strnicmp
__p__fmode
__p___initenv
_cexit
__p__commode
_vsnprintf
__set_app_type
_exit
_except_handler3
_snprintf
_adjust_fdiv
strrchr
abort
fopen
_controlfp

advapi32

FreeSid
AllocateAndInitializeSid
RegQueryInfoKeyA
InitializeAcl
OpenThreadToken
RevertToSelf
RegEnumKeyExA
OpenProcessToken
CryptHashData
GetUserNameA
CopySid
SetSecurityDescriptorDacl
OpenSCManagerW
CheckTokenMembership
RegQueryValueExW
OpenServiceA
RegSetValueExW
RegOpenKeyExA
CryptDestroyHash
RegQueryValueExA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7466e2b9f0f8ecf4f5397349739d1d74

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

advapi32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 77KB - Virtual size: 76KB

.data Size: 28KB - Virtual size: 28KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 77KB - Virtual size: 76KB

.data
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 39KB - Virtual size: 39KB