e0b881887ff6aed936c9de64bb833aa62df7a5c443c819ccd5fd0ad27939db1b

Sharing

Copy URL Twitter E-mail

General

Target

e0b881887ff6aed936c9de64bb833aa62df7a5c443c819ccd5fd0ad27939db1b
Size

172KB
MD5

c631933d580ec3b2bf56fcc39e61ee76
SHA1

a2efddd56a2e35305231a865df1aa291d5d0cdfb
SHA256

e0b881887ff6aed936c9de64bb833aa62df7a5c443c819ccd5fd0ad27939db1b
SHA512

0f73366b6bedf7a5c14461fdec34b91cd7e4d83c75b0116efea677bf23fd4b2b5ee5a41f4fc610a651410589bb0577016f365cc52feb17686aff764113f26851
SSDEEP

3072:wUCSzSRsoNLiQang26tZyf2heG1WWJg8B9XRSpHhsXp7aJ0RwehUgLlawD9:wUxzSfLiQp26/22hJMHK7Y0VWs

Score

N/A

Malware Config

Signatures

Files

e0b881887ff6aed936c9de64bb833aa62df7a5c443c819ccd5fd0ad27939db1b
.exe windows x86

2f9faae252c7c0f645787a4039c3715b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
OpenProcessToken
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey

kernel32

GlobalFree
GlobalAlloc
GetStringTypeW
LocalAlloc
SetLastError
GetTickCount
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
CloseHandle
GetCPInfo
RtlUnwind
SetHandleCount
GetVersion
GetModuleHandleA
FindResourceA
GetLocaleInfoA
lstrlenA
GetLastError
SetConsoleCtrlHandler
WaitForSingleObject
EnumCalendarInfoA
GetThreadLocale
GetDiskFreeSpaceA
TlsAlloc
ExitProcess
TlsFree
HeapFree
UnhandledExceptionFilter
GetModuleFileNameA
RaiseException
SetEvent
CompareStringA
lstrcpynA
lstrcpyA
LocalFree
InterlockedIncrement
GetACP
GlobalAddAtomA
MultiByteToWideChar
DeleteCriticalSection
FindClose
GlobalDeleteAtom
DeleteFileA
GetSystemDirectoryA
SetErrorMode
CreateThread
InterlockedDecrement
GetCurrentThreadId
GetWindowsDirectoryA
CreateEventA
GetEnvironmentStringsA
GetOEMCP
GetCommandLineA
GlobalReAlloc
InitializeCriticalSection
FreeLibrary
CreateFileA
LockResource
GetVersionExA
SetThreadLocale
EnterCriticalSection
GetProcAddress
GetFileSize
FindFirstFileA
GlobalUnlock
GetCurrentProcess
SetEndOfFile
WinExec
ReadFile
VirtualAlloc
GetStartupInfoA
TlsGetValue
GlobalLock
FormatMessageA
HeapAlloc
SetFilePointer
GlobalHandle
lstrcmpA
TlsSetValue
SizeofResource
GetStdHandle
Sleep
FreeResource
GetSystemInfo
GetLocalTime
VirtualQuery
GetFileType
WriteFile
MulDiv
GetPrivateProfileStringA
LoadResource
WideCharToMultiByte
VirtualFree
GetProcessHeap

oleaut32

VariantCopyInd
SysStringLen
SysAllocStringLen
VariantClear
VariantChangeTypeEx
SysFreeString
SysReAllocStringLen

ole32

IsEqualGUID

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f9faae252c7c0f645787a4039c3715b

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

ole32

Sections

.text Size: 140KB - Virtual size: 138KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 140KB - Virtual size: 138KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 3KB