eb9c24e24cd4ee963a9cb85e1c458e1a66e9b39999527d18a1d980b7a9826f35

Sharing

Copy URL Twitter E-mail

General

Target

eb9c24e24cd4ee963a9cb85e1c458e1a66e9b39999527d18a1d980b7a9826f35
Size

592KB
MD5

670c4d32d339a3ed06e4c9ad8ddc6d10
SHA1

bbfdbdfe03741eb6a56e8eff1e93ade34fe5e721
SHA256

eb9c24e24cd4ee963a9cb85e1c458e1a66e9b39999527d18a1d980b7a9826f35
SHA512

692a7ee56214fbb4c0cf2ecbf09b786812609e371fd7295b212ad75c1a05d536939ba764ef54ccfbcb8c17608a4dd1876f5fa5e78a1b48041b1b3a296a8c836a
SSDEEP

6144:kEHnaD9rvz3q4ATrKf4JAuBnPRklfBdJoCQd6qQoj9onCzlEM2fFqs/ZcwFUOskL:9atzq4F2ZklvAxoWluEdJ1kCw

Score

N/A

Malware Config

Signatures

Files

eb9c24e24cd4ee963a9cb85e1c458e1a66e9b39999527d18a1d980b7a9826f35
.exe windows x86

55264a4a097a993a07bb501b9d751ad0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
GetModuleFileNameA
SetLastError
Sleep
GetTickCount
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerA
CreateProcessA
FindFirstFileA
DeleteFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetCurrentDirectoryA
CreateNamedPipeA
DisconnectNamedPipe
FlushFileBuffers
CreateThread
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetFilePointer
GetSystemTime
CreateFileA
GetLastError
CloseHandle
ReadFile
WriteFile
ExpandEnvironmentStringsA
GetVersionExA
LoadLibraryA
lstrcpynA
GetProcAddress
HeapFree
HeapAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
GetStdHandle
SetHandleCount
GetFileType
RtlUnwind
HeapSize
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection
GetConsoleCP
GetConsoleMode

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetGetConnectedState

user32

PostMessageA
RegisterWindowMessageA

advapi32

SetSecurityDescriptorDacl
ControlService
DeleteService
StartServiceCtrlDispatcherA
CreateServiceA
QueryServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
SetServiceStatus
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

55264a4a097a993a07bb501b9d751ad0

Headers

File Characteristics

Imports

kernel32

wininet

user32

advapi32

Sections

.text Size: 60KB - Virtual size: 57KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.vmp0 Size: 500KB - Virtual size: 1.6MB

.text
Size: 60KB - Virtual size: 57KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.vmp0
Size: 500KB - Virtual size: 1.6MB