e94df011f19618b3d93765a524e0f2e8b89efb82e6808912600150c811ad8699

General

Target

e94df011f19618b3d93765a524e0f2e8b89efb82e6808912600150c811ad8699
Size

951KB
MD5

0e9cc0ec4c302f1cd48d884bcc1dae40
SHA1

b2b2138c02a24687fa0e5bc2efb252db8534a4c1
SHA256

e94df011f19618b3d93765a524e0f2e8b89efb82e6808912600150c811ad8699
SHA512

6f61b43a67286f3c7be5fdd6e23425fdd6e2ce93ad7709c621611666ff64e5d01204fd14a142f7f763fe6414fcba1bbd1c774799f0e1f5716e8cd42a449a9a1e
SSDEEP

24576:qrUbV0cvMzVsXeNKRNEmWYL0mm+3vf1xFCLzjNxcka:aUb6c2VsXiKQUL0i/HwXVa

Score

N/A

Malware Config

Signatures

Files

e94df011f19618b3d93765a524e0f2e8b89efb82e6808912600150c811ad8699
.exe windows x86

df2e663cd6f3899408d79b3e4264d5a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

kernel32

LocalFree
lstrcmpiW
GetCommandLineW
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
MultiByteToWideChar
ReadFile
WriteFile
CloseHandle
SetFilePointer
CreateFileW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetProcAddress
LoadLibraryExW
ExpandEnvironmentStringsW
lstrlenW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
RemoveDirectoryW
DeleteFileW
CreateDirectoryW
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
GetModuleFileNameW
MoveFileExW
GetLastError
EnumResourceNamesW
GetTempPathW
FindFirstFileExW
SetProcessWorkingSetSize
GetCurrentProcess
ExitProcess
GetModuleHandleW
FindResourceW
SizeofResource
LockResource
LoadResource

shell32

CommandLineToArgvW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 749KB - Virtual size: 748KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

df2e663cd6f3899408d79b3e4264d5a0

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

shell32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: - Virtual size: 16B

.rsrc Size: 749KB - Virtual size: 748KB

.vmp0 Size: 192KB - Virtual size: 1.3MB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: - Virtual size: 16B

.rsrc
Size: 749KB - Virtual size: 748KB

.vmp0
Size: 192KB - Virtual size: 1.3MB