ef2fbf886b373333e27f107264f6699e09b2e3c2ed4bd67a0c6432de2ec7894f

General

Target

ef2fbf886b373333e27f107264f6699e09b2e3c2ed4bd67a0c6432de2ec7894f
Size

801KB
MD5

4525f884498434e53657812823001710
SHA1

e5ea35011f16b21efaadfa078eecf817138fe0ca
SHA256

ef2fbf886b373333e27f107264f6699e09b2e3c2ed4bd67a0c6432de2ec7894f
SHA512

1b5ad1d938fb6fbd168c8449a6ac4bc3e6ed8f24c7d3155b3c2aab14ba4babbe0f8f51bfd082a17e647cf74825229199425b960ab05094c168602156052fe48f
SSDEEP

24576:ApSEUTKRIMZtHu4uab5LeT/XAT0+LTQuN+G1:ADRRIMXH/XM/XsT0u0G

Score

N/A

Malware Config

Signatures

Files

ef2fbf886b373333e27f107264f6699e09b2e3c2ed4bd67a0c6432de2ec7894f
.exe windows x86

23105253f3bb231f9e54165ed111f92f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindAtomA
GetProcessVersion
LoadLibraryW
GetCurrentThread
SetLastError
DeleteFileA
GetProcessHeap
TlsGetValue
GetStringTypeW
SuspendThread
GetDriveTypeA
VirtualProtect
HeapFree
CreateEventW
lstrlenA
GetPrivateProfileSectionA
GetVolumePathNameA
ResumeThread
GetPrivateProfileIntW
CreateEventW
CreateEventW

clbcatq

CheckMemoryGates
ComPlusMigrate
SetupOpen
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
DllGetClassObject
DllGetClassObject
CheckMemoryGates
SetupOpen
CheckMemoryGates
SetupOpen

d3dramp

RampOldTri
g_RampOld_BeadTbl
RampOldTri
g_RampOld_BeadTbl

Sections

.text
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 455B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

23105253f3bb231f9e54165ed111f92f

Headers

File Characteristics

Imports

kernel32

clbcatq

d3dramp

Sections

.text Size: 1024B - Virtual size: 928B

.data Size: 2KB - Virtual size: 11KB

.rdata Size: 512B - Virtual size: 1.4MB

.rsrc Size: 795KB - Virtual size: 795KB

.orpc Size: 512B - Virtual size: 455B

.text
Size: 1024B - Virtual size: 928B

.data
Size: 2KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 1.4MB

.rsrc
Size: 795KB - Virtual size: 795KB

.orpc
Size: 512B - Virtual size: 455B