eccb9c9270fc6de6e028ea6db78aaae7dfa0b153ad5fd1b32761b08ed257e4b7

Sharing

Copy URL

Twitter E-mail

General

Target

eccb9c9270fc6de6e028ea6db78aaae7dfa0b153ad5fd1b32761b08ed257e4b7
Size

93KB
MD5

88d9fe7e4f5d6e5fe71374252fabe7fd
SHA1

e6bd5e099d0680c9ee6c627af5a1153c4044478a
SHA256

eccb9c9270fc6de6e028ea6db78aaae7dfa0b153ad5fd1b32761b08ed257e4b7
SHA512

3fd620c960cb0e7de277b012eee47f5e126c5ac25ed0b249109003bdcf5ad60bee1448d30276c3400e1db117d8b78142740a96824dd29953c8b6543483c2bff2
SSDEEP

1536:rC2irhslKPIOqFNGLZyaRx5G8kJKsgc92sWjcdM7irTAOH24:+ZoHXu08kJKsX5M7irTAOHV

Score

N/A

Malware Config

Signatures

Files

eccb9c9270fc6de6e028ea6db78aaae7dfa0b153ad5fd1b32761b08ed257e4b7
.exe windows x86

5a968689b9540a8903c22c78470f5d1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadResource
LockResource
SizeofResource
lstrcpyW
lstrcatW
GetStartupInfoA
FindResourceA
GlobalLock
GlobalUnlock
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
VirtualAlloc
VirtualFree
GetVolumeInformationW
HeapAlloc
HeapFree
GetProcessHeap
GetWindowsDirectoryW
lstrcpynW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
RaiseException
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
Sleep
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
RtlUnwind
OutputDebugStringW
SetStdHandle
WriteConsoleW
GetStringTypeW
HeapReAlloc
HeapSize
LCMapStringW
FlushFileBuffers
CloseHandle
WriteFile
GetShortPathNameW
CreateFileW
ExpandEnvironmentStringsW
GetEnvironmentVariableW
GetModuleHandleW
GetCommandLineW

user32

GetWindowTextW
MessageBoxW
GetClassNameW
GetLastActivePopup
ShowWindow
BringWindowToTop
OpenClipboard
CloseClipboard
GetClipboardData
SetForegroundWindow
SetFocus
SendInput
MapVirtualKeyA
SetActiveWindow
BlockInput
GetParent
CreateDesktopA
OpenInputDesktop
EnumDesktopWindows
GetForegroundWindow
SetParent
EmptyClipboard
CloseDesktop
PostMessageA
SetWindowPos
GetSystemMetrics

ole32

CoInitializeSecurity
CoInitializeEx
CoUninitialize

shell32

CommandLineToArgvW
ShellExecuteW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

ntdll

NtQuerySystemInformation

iphlpapi

GetAdaptersInfo

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyExA
RegOpenKeyExA

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a968689b9540a8903c22c78470f5d1c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

shell32

version

ntdll

iphlpapi

advapi32

Sections

.text Size: 57KB - Virtual size: 56KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 57KB - Virtual size: 56KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB