e0dcadb814820e3b17c8fc56e1ad681f7bb2154958fb2b661a5b49dc202ff861

General

Target

e0dcadb814820e3b17c8fc56e1ad681f7bb2154958fb2b661a5b49dc202ff861
Size

56KB
MD5

9dd172344eac4d77c5bfdade5d08ef96
SHA1

c4d6f08d5ee632f0f6344811d925b4b058412d03
SHA256

e0dcadb814820e3b17c8fc56e1ad681f7bb2154958fb2b661a5b49dc202ff861
SHA512

2447ccc7ab6ea29c51721e8b15d705d2946281d8bcc44c41a25a011f8a58f9026b35816f24f7bfa5a64b533b43bfb33fc754c2dc5f17161f9ad0774d8b414a93
SSDEEP

1536:y/MRlyK0NZIHD8OysXSRMylrzgKpoKJxry1O:YMTyhNKHJXSy6zCCly0

Score

N/A

Malware Config

Signatures

Files

e0dcadb814820e3b17c8fc56e1ad681f7bb2154958fb2b661a5b49dc202ff861
.exe windows x86

e2b45b0395a7fdffb8b3b71500901d25

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
DeviceIoControl
WaitForSingleObject
CreateEventA
lstrlenA
FormatMessageA
LocalFree
GetOverlappedResult
DuplicateHandle
GetCurrentProcess
OpenProcess
ExitProcess
GetModuleHandleA
GetCommandLineA
GetCommConfig
CloseHandle
GetTickCount
lstrcpyA

gdi32

GetTextExtentPoint32A
DeleteObject
SelectObject

user32

DestroyIcon
SendDlgItemMessageA
wsprintfA
SetWindowTextA
LoadImageA
ScreenToClient
ReleaseDC
SendMessageA
GetDC
GetWindowRect
GetDlgItem
LoadStringA
KillTimer
GetWindowTextA
SetDlgItemTextA
PostQuitMessage
ShowWindow
SetTimer
SetForegroundWindow
DestroyWindow
DefWindowProcA
UnregisterClassA
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
CreateDialogParamA
RegisterClassA
LoadCursorA
LoadIconA
LoadBitmapA
SetWindowPos

shell32

Shell_NotifyIconA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gmetilq
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2b45b0395a7fdffb8b3b71500901d25

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

shell32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 436B

.rsrc Size: 49KB - Virtual size: 50KB

gmetilq Size: - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 436B

.rsrc
Size: 49KB - Virtual size: 50KB

gmetilq
Size: - Virtual size: 4KB