e8709b39793fc56dcb64da89727c184b3fba68a1806ec1a52971a2ff67a88bcc

General

Target

e8709b39793fc56dcb64da89727c184b3fba68a1806ec1a52971a2ff67a88bcc
Size

772KB
MD5

43383c749a6d79b5fce4dd3ea5ad9f80
SHA1

9f6aec7caa8cd496cea1f6a1e126fa837f3ad337
SHA256

e8709b39793fc56dcb64da89727c184b3fba68a1806ec1a52971a2ff67a88bcc
SHA512

093e6d9490eb70a89747e43e5d755b506a4cc1bf440c67fd8bc3177263ae4c24e0c090965e166234301e226bf199e2630bcfc3ecf0dbce137c9133fd3ac16d63
SSDEEP

12288:Rj9WtzLNdO/J5i3UQVpxzmSZmagP7nvtNyKl7HeYHLX0M+rtIbP6mbilRgHwMvf:RhWvQrikQZglFN5HeuEM+ryPiWtH

Score

N/A

Malware Config

Signatures

Files

e8709b39793fc56dcb64da89727c184b3fba68a1806ec1a52971a2ff67a88bcc
.exe windows x86

c1ee7b8ca4034207dbef00c040b09f83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetEvent
DisconnectNamedPipe
CopyFileA
GetStdHandle
GetFileAttributesW
DeleteFileA
VirtualProtect
WriteConsoleW
GetCommandLineA
GetCurrentDirectoryA
GetStartupInfoA
ResumeThread
lstrcpyA
CreatePipe
HeapDestroy
WriteConsoleW
GetPriorityClass
lstrlenW
WriteConsoleW
GetProcessHeap
GetModuleHandleA

mmcndmgr

DllUnregisterServer
DllUnregisterServer
DllRegisterServer
DllRegisterServer

shell32

DragQueryFileA
DragFinish
SHFree
DragAcceptFiles
SHGetSettings
SHGetMalloc
DllUnregisterServer
DuplicateIcon
ShellMessageBoxA
SHGetDiskFreeSpaceA
StrChrA
ShellAboutA
ExtractIconA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 765KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c1ee7b8ca4034207dbef00c040b09f83

Headers

File Characteristics

Imports

kernel32

mmcndmgr

shell32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 264B

.rsrc Size: 765KB - Virtual size: 2.1MB

.rdata Size: 512B - Virtual size: 177B

.impdata Size: 512B - Virtual size: 195B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 264B

.rsrc
Size: 765KB - Virtual size: 2.1MB

.rdata
Size: 512B - Virtual size: 177B

.impdata
Size: 512B - Virtual size: 195B