ea49361b97da91dacb58a018156f4ec300942f66f614721f9a33e037152e0b4f

Sharing

Copy URL Twitter E-mail

General

Target

ea49361b97da91dacb58a018156f4ec300942f66f614721f9a33e037152e0b4f
Size

76KB
MD5

23ce5be16566c293c7380da05791b3dd
SHA1

ecb45f15420576d3c283637afe0a984c5d4e6cc1
SHA256

ea49361b97da91dacb58a018156f4ec300942f66f614721f9a33e037152e0b4f
SHA512

58130bd7b49da982e80d0211dc8d1394ca5cc7e2f0b2c5ee10c55d05b130fadc5a55dcd77a1bae1cb2a01996e9274e6fed3ccdff9719722c4b2f65084549bd77
SSDEEP

1536:hhR36k5MZ8kXZjNWLsp/w96ef8/UH2Leenrd6bXFw4P:TR36ke1NWLsp/w96ef8/UHnenrd2l

Score

N/A

Malware Config

Signatures

Files

ea49361b97da91dacb58a018156f4ec300942f66f614721f9a33e037152e0b4f
.exe windows x86

47954b40735259cfea508f41718ef692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegCreateKeyExA
RegCreateKeyExW
RegEnumValueA
RegEnumValueW
RegOpenKeyA
RegOpenKeyW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegSetValueExA
RegEnumKeyExW
RegCloseKey

kernel32

LeaveCriticalSection
GetProcAddress
HeapDestroy
GetLastError
LoadResource
SizeofResource
lstrlenA
FreeLibrary
EnterCriticalSection
InterlockedIncrement
GetCommandLineW
GetCurrentThreadId
InitializeCriticalSection
Sleep
DeleteCriticalSection
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
SetEvent
GetStartupInfoW
lstrcatW
LoadLibraryExW
CreateMutexW
CreateMutexA
GetShortPathNameA
LoadLibraryExA
LoadLibraryA
lstrcpynW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
FindResourceW
FindResourceA
CreateEventW
CreateEventA
SetLastError
LoadLibraryW
DeleteFileW
IsBadWritePtr
GetShortPathNameW
lstrcpyW
FreeLibraryAndExitThread
WideCharToMultiByte
CreateFileW
GetTempFileNameW
GetTempPathW
WriteFile
lstrcmpiA
lstrcmpiW
GlobalLock
GlobalUnlock
GetVersionExA
lstrlenW
MultiByteToWideChar

ole32

CoRegisterClassObject
CoRevokeClassObject
CoInitializeEx
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoResumeClassObjects
ReleaseStgMedium
CoCreateInstance
CoSuspendClassObjects

oleaut32

VarUI4FromStr
SysAllocString
RegisterTypeLi
LoadTypeLi
SysFreeString

shlwapi

StrRetToBufW

shell32

ShellExecuteExW
SHGetDesktopFolder
DragQueryFileW

msvcrt

_purecall
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
memmove
_wsplitpath
wcslen
_wcslwr
free
realloc
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z

user32

GetWindow
IsWindowVisible
GetWindowThreadProcessId
GetDesktopWindow
GetParent
ShowWindow
IsIconic
SetForegroundWindow
SendMessageTimeoutA
SendMessageA
CharNextW
PostThreadMessageW
PostThreadMessageA
FindWindowW
RegisterClipboardFormatW
RegisterWindowMessageA
GetMessageA
DispatchMessageA
DispatchMessageW
FindWindowA
GetMessageW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47954b40735259cfea508f41718ef692

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

shlwapi

shell32

msvcrt

user32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 32KB - Virtual size: 28KB