ea626973e4c241e5093672dbe9270a3d9016567c0627b7bbc26bc95a4b322b69

Sharing

Copy URL Twitter E-mail

General

Target

ea626973e4c241e5093672dbe9270a3d9016567c0627b7bbc26bc95a4b322b69
Size

76KB
MD5

9e1f206bf8cf2cca0042f4068c3b156a
SHA1

f26caaa7f48f967cb43b0e05a9a011d0fdd0aca2
SHA256

ea626973e4c241e5093672dbe9270a3d9016567c0627b7bbc26bc95a4b322b69
SHA512

019c1888a1c16f31da8255719f58492a02b2c3e21c2a34289328afee9f5199fc620b8d599ccc9552d4ab55edb94d58dc04221581f4bbf477e50cd5fb689b9741
SSDEEP

1536:NH3hhA2HCL6QT4zEMLP0JhlhAnEpzkpq45bX4xw/:ThA2HCL9mElJOq6X4W/

Score

N/A

Malware Config

Signatures

Files

ea626973e4c241e5093672dbe9270a3d9016567c0627b7bbc26bc95a4b322b69
.exe windows x86

70ca3834be5141db86d88aa8cdd6ff22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
GetFileSize
SetFilePointer
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
RtlUnwind
RaiseException
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize

user32

IsWindowEnabled
GetCaretPos
GetScrollPos
GetDlgItem
GetMenuState
CheckMenuRadioItem
GetMenu
AnyPopup
GetActiveWindow
GetDlgItemInt
GetFocus
IsIconic
GetWindow
ArrangeIconicWindows
GetSubMenu
GetDesktopWindow
AdjustWindowRect
IsMenu
GetClassLongA
GetDlgCtrlID
GetSysColor
GetWindowTextLengthA

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70ca3834be5141db86d88aa8cdd6ff22

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 53KB - Virtual size: 53KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 7KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 53KB - Virtual size: 53KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 7KB

.reloc
Size: 5KB - Virtual size: 4KB