ef3d1e5b12def8c6f2465b910c389fb009ddb748baf584f50aeb15b209b83c44

Sharing

Copy URL Twitter E-mail

General

Target

ef3d1e5b12def8c6f2465b910c389fb009ddb748baf584f50aeb15b209b83c44
Size

4.2MB
MD5

f5852685cdcdd4e5a7703f418ce433ad
SHA1

e0ea1a1b6d67c2093698f370e346bd4482355795
SHA256

ef3d1e5b12def8c6f2465b910c389fb009ddb748baf584f50aeb15b209b83c44
SHA512

3eda9d1c95dd45047f148e3af6e72156bc245b8a1c1c188e534d1204764ebb746255678ae45433483efa8848dd17ba9ca66e5a7356a0fcd67a5eece4ead6c99e
SSDEEP

98304:XHblJAfSb0kSHG9xfyLII7YJ372Fe+I8OjtE:XBR009xfyfOJ

Score

N/A

Malware Config

Signatures

Files

ef3d1e5b12def8c6f2465b910c389fb009ddb748baf584f50aeb15b209b83c44
.exe windows x86

e1b2283499f88f914f19bd780d778914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
GetCurrentProcessId
FileTimeToSystemTime
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcess
WaitForSingleObject
WideCharToMultiByte
MultiByteToWideChar
GetProcessHeap
SetLastError
CreateFileW
GetLastError
HeapAlloc
GetTempPathA
ResumeThread
GetCurrentThread
Sleep
GetLocalTime
DuplicateHandle
CreateMutexA
GetModuleHandleExW
GetTickCount
InterlockedCompareExchange
ExitProcess
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
HeapReAlloc
GetProcAddress
LoadLibraryA
LeaveCriticalSection
RemoveDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
InitializeCriticalSection
DeleteCriticalSection
HeapFree
CreateFileA
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
GetModuleHandleW
TlsFree
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
GetStartupInfoW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegOpenKeyExW
RegOpenKeyA
RegCreateKeyA
RegQueryInfoKeyA

user32

PostMessageA
SetWindowPos
GetWindowTextW
GetWindowRect
UpdateWindow
CheckMenuItem
RedrawWindow
DispatchMessageA
PostQuitMessage
GetMessageW
GetLastInputInfo
ShowWindow
PeekMessageW
CreateWindowExA
SetFocus
SetForegroundWindow
TrackPopupMenu
BringWindowToTop
GetParent
LoadIconA
PeekMessageA
EnumWindows
SendMessageW
DefWindowProcW
RegisterWindowMessageA
MessageBoxA
DispatchMessageW
GetDesktopWindow
MsgWaitForMultipleObjects
CreatePopupMenu
RegisterClassExA
LoadIconW
RegisterWindowMessageW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1b2283499f88f914f19bd780d778914

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 86KB - Virtual size: 96KB

.rsrc Size: 32KB - Virtual size: 32KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 86KB - Virtual size: 96KB

.rsrc
Size: 32KB - Virtual size: 32KB

.reloc
Size: 24KB - Virtual size: 23KB