ec465a1902a32d2b07193a91b5e2af87bf1f0cdd084d69ec3fafc30b1e0053c6

Sharing

Copy URL Twitter E-mail

General

Target

ec465a1902a32d2b07193a91b5e2af87bf1f0cdd084d69ec3fafc30b1e0053c6
Size

125KB
MD5

57c3b7d7b32d970306c0b8b2e548f0ea
SHA1

7f27a3450a5e3d7188fe389f4cc75ad83f5ab3a1
SHA256

ec465a1902a32d2b07193a91b5e2af87bf1f0cdd084d69ec3fafc30b1e0053c6
SHA512

addd4f2a4963c34c86c3a94b646d3f32495eeeb3aff06d2b5f22c633d1f118357febc57876a91fc9cbeb3928218d2a52ac5b8c6df249a7f1de97a62fd2416dca
SSDEEP

1536:LMwFh+UJdTZNTJyCU7oYu3wgt+KDNH1xl7btzvKQsGZ8H4bp3FAPdtncYnaDA41:LMwFZ7NoC9RtLZlXtzV2Yt3FAfn41

Score

N/A

Malware Config

Signatures

Files

ec465a1902a32d2b07193a91b5e2af87bf1f0cdd084d69ec3fafc30b1e0053c6
.exe windows x86

a31d46db16310b217bae9ce42b24aa3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord121

shlwapi

PathGetCharTypeA

kernel32

HeapDestroy
CompareStringW
GetTimeZoneInformation
GetLocaleInfoW
GetCurrentProcessId
GetPriorityClass
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetProcessVersion
GetEnvironmentStringsW
GetCommandLineA
CreateThread
GetConsoleMode
InterlockedIncrement
GetVersionExW
GetFileSizeEx
GetOEMCP
CompareStringA
FindResourceW
CreateEventW
GetVersionExA
LCMapStringW
GetModuleHandleA
InterlockedExchange
EnterCriticalSection
InterlockedDecrement
LoadLibraryA
SetStdHandle
InterlockedExchangeAdd
FormatMessageW
FlushFileBuffers
GetProcessHeap
FindClose
ReadFile
GetSystemInfo
GetCurrentProcess
TlsAlloc
OutputDebugStringA
GetCommandLineW
FreeLibrary
GetFileType
WaitForSingleObject
ExitProcess
CreateFileA
LocalAlloc
WriteFile
SetFilePointer
GetACP
GetLastError
GetStringTypeW
MultiByteToWideChar
GlobalAlloc
RaiseException
SizeofResource
LoadLibraryExW
FileTimeToLocalFileTime
WideCharToMultiByte
CreateFileW
CreateMutexW
lstrlenW
SetEnvironmentVariableA
GetTickCount
lstrlenA
LocalFree
HeapReAlloc
Sleep
SetEvent
DeleteCriticalSection
WaitForSingleObjectEx
LeaveCriticalSection
CreateDirectoryA
FindFirstFileW
GetStdHandle
ResetEvent
GetModuleFileNameA
FreeLibraryAndExitThread
GetModuleFileNameW
FreeEnvironmentStringsW
HeapFree
CloseHandle
InitializeCriticalSection
GetEnvironmentStrings
TlsSetValue
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
FreeEnvironmentStringsA
SetHandleCount
TlsGetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
LoadLibraryExA
GetCPInfo
HeapAlloc
RtlUnwind
UnhandledExceptionFilter
LCMapStringA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
TerminateProcess
VirtualProtect
VirtualQuery

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a31d46db16310b217bae9ce42b24aa3a

Headers

DLL Characteristics

File Characteristics

Imports

msi

shlwapi

kernel32

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 44KB - Virtual size: 57KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 44KB - Virtual size: 57KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 3KB