e1ea8953f436474c137b751248e3a6dc5f16778d6e5f00efc84c2e26617cf897

Sharing

Copy URL Twitter E-mail

General

Target

e1ea8953f436474c137b751248e3a6dc5f16778d6e5f00efc84c2e26617cf897
Size

130KB
MD5

470932c251c39f75069c12c80119dca0
SHA1

46f7e59b0d31cf545dab490b6965441250517afd
SHA256

e1ea8953f436474c137b751248e3a6dc5f16778d6e5f00efc84c2e26617cf897
SHA512

021efa9c7b58568db42f2a7a95947f5cf02a69e0150bea51a3cacd79ca1c80288f6d3f794b31d96c9622a02ab7656937ce1cb807381c114125ce198c614dec47
SSDEEP

3072:RdxaHNoLvgUUmyxZ6cb7ohZxE2/d1CLmug4Q5ZEs67er:RaNorjUmyjbyfmLLg4Q5y5q

Score

N/A

Malware Config

Signatures

Files

e1ea8953f436474c137b751248e3a6dc5f16778d6e5f00efc84c2e26617cf897
.exe windows x86

0d3cc378a1d12ece9b90a81898903e0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
CloseHandle
CreateFileA
DeleteFileA
SetFileAttributesA
FreeLibrary
GetProcAddress
LoadLibraryA
FindClose
FindNextFileA
FindFirstFileA
GetFileAttributesA
lstrcpyA
GetVersion
GetModuleHandleA
CreateEventA
OpenProcess
GetCommandLineA
WaitForSingleObject
SetEvent
WaitForMultipleObjects
CompareStringW
CompareStringA
FlushFileBuffers
GetLocaleInfoW
GetTimeZoneInformation
SetFilePointer
SetStdHandle
ReadFile
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
WriteFile
GetFileType
GetLastError
Sleep
HeapAlloc
HeapFree
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
GetStartupInfoA
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetEnvironmentVariableA

user32

DefWindowProcA
DestroyWindow
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
MessageBoxA
PostMessageA

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0d3cc378a1d12ece9b90a81898903e0c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 73KB - Virtual size: 76KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 73KB - Virtual size: 76KB