1e2fbdcb58648ebacda513a4e4f0a76b38515080cd8e248a3a2481f66915995d

Sharing

Copy URL Twitter E-mail

General

Target

1e2fbdcb58648ebacda513a4e4f0a76b38515080cd8e248a3a2481f66915995d
Size

214KB
MD5

1a0a989887dd4785dbb6540fd8832740
SHA1

0aea0f67f3b849db5cef1529a2937a6343149297
SHA256

1e2fbdcb58648ebacda513a4e4f0a76b38515080cd8e248a3a2481f66915995d
SHA512

526e1e6516478e86e57d1172bc4e3b101d7d0f5816bcba9b491c2a5a5a2199831a28c4bb07f7de2fe456fe21f7263b082846ef84af26669cf6567ad2cf68e7b5
SSDEEP

3072:XuQLluEx0/6ssWR8t/1kQFYNIpz/j768gLJzAesy1KIOq15Di6NZUb/gkJ+TN:eQLpx0/6b96Ipz0JzAtYKIO85O6XT

Score

N/A

Malware Config

Signatures

Files

1e2fbdcb58648ebacda513a4e4f0a76b38515080cd8e248a3a2481f66915995d
.exe windows x86

d976372238f32391dd38b47c928cae47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

FindExecutableA
ShellExecuteExA
DragQueryPoint
DragAcceptFiles
DragQueryFileW
ShellAboutW
DragFinish

ole32

OleBuildVersion
CoFreeAllLibraries
OleCreateFromFileEx
CoQueryAuthenticationServices
StgCreateDocfileOnILockBytes

advapi32

SetFileSecurityW
MapGenericMask
QueryServiceConfigA
DeregisterEventSource
LogonUserA
RegisterEventSourceW
GetSecurityDescriptorGroup
GetSidSubAuthorityCount

kernel32

SetFilePointer
FlushFileBuffers
CloseHandle
GetConsoleCP
GetStringTypeW
WriteConsoleW
SetStdHandle
CreateFileW
GetConsoleMode
TlsSetValue
lstrcpynA
CancelIo
CreateHardLinkW
SetTapeParameters
FindVolumeClose
GetWindowsDirectoryW
HeapAlloc
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
Sleep
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
CompareStringW
MultiByteToWideChar
SetEnvironmentVariableA
HeapSize
IsProcessorFeaturePresent
LCMapStringW

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d976372238f32391dd38b47c928cae47

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

advapi32

kernel32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 70KB

.rsrc Size: 149KB - Virtual size: 152KB

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 70KB

.rsrc
Size: 149KB - Virtual size: 152KB