eef03acc35301da1fa2268e7f2b1dc666888e57d4f3a9fe9e20bd37f3b8ef519

Sharing

Copy URL

Twitter E-mail

General

Target

eef03acc35301da1fa2268e7f2b1dc666888e57d4f3a9fe9e20bd37f3b8ef519
Size

3.7MB
MD5

7c0c3b9ad0ddc47ac5124fd28f4c8487
SHA1

ba7c97a1e5fd68ff4972552feb129287f8151ca2
SHA256

eef03acc35301da1fa2268e7f2b1dc666888e57d4f3a9fe9e20bd37f3b8ef519
SHA512

161b7fc7e7f6d61509485c842f8fa25ac9f0c57a3963a1d20710d3728e8a881c880e66c0c70b271b71957ae34bd61f28e9254a3a507ed2f0599416e95b27ffe8
SSDEEP

98304:PkmQL/ZEg0HBI08J6FHdobEJPlSWqfX3rJ:smQL/ZR0hI0VH6oJPlQ3l

Score

N/A

Malware Config

Signatures

Files

eef03acc35301da1fa2268e7f2b1dc666888e57d4f3a9fe9e20bd37f3b8ef519
.exe windows x86

4e2faa586c139c341358a532b2bb8a48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
GetLocalTime
LocalFileTimeToFileTime
HeapAlloc
HeapFree
CreateFileA
SystemTimeToFileTime
CreateMutexA
GetModuleHandleExW
MultiByteToWideChar
GetLastError
InterlockedCompareExchange
GetModuleHandleA
GetVersionExA
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
VirtualFree
DuplicateHandle
WideCharToMultiByte
GetCurrentProcess
WaitForSingleObjectEx
GetFileAttributesA
DisableThreadLibraryCalls
CloseHandle
GetTempPathA
GetProcAddress
LoadLibraryA
RemoveDirectoryA
GetCurrentThreadId
CreateFileW
SetLastError
ExitProcess
Sleep
GetTickCount
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
SetEndOfFile
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
GetStartupInfoW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType

advapi32

RegEnumKeyA
RegOpenKeyExW
RegEnumValueA
RegQueryValueW
RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegEnumKeyExW
RegCloseKey
RegOpenKeyExA
RegOpenKeyW
RegCreateKeyExW
RegQueryValueExA
RegQueryInfoKeyA

user32

LoadIconW
LoadIconA
CreateWindowExW
PeekMessageW
CreatePopupMenu
RegisterClassExW
GetMessageW
DispatchMessageW
AppendMenuA
PostQuitMessage
GetDesktopWindow
FindWindowW
GetDlgItem
TrackPopupMenu
SetWindowPos
CheckMenuItem
CloseDesktop
UpdateWindow
RegisterWindowMessageA
SendMessageW
FindWindowA
AppendMenuW
GetWindowRect
PostMessageA
GetWindowTextA
DispatchMessageA
RedrawWindow
BringWindowToTop
SetForegroundWindow
MessageBoxW
SendMessageA
SetFocus
DestroyWindow
EnumWindows

Sections

.text
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 145KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e2faa586c139c341358a532b2bb8a48

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 550KB - Virtual size: 549KB

.rdata Size: 3.0MB - Virtual size: 3.0MB

.data Size: 145KB - Virtual size: 155KB

.rsrc Size: 32KB - Virtual size: 32KB

.reloc Size: 19KB - Virtual size: 19KB

.text
Size: 550KB - Virtual size: 549KB

.rdata
Size: 3.0MB - Virtual size: 3.0MB

.data
Size: 145KB - Virtual size: 155KB

.rsrc
Size: 32KB - Virtual size: 32KB

.reloc
Size: 19KB - Virtual size: 19KB