eb2902f3c06a64b2183111af02aae3ff38b6b2fb9d71672793d6cdb40eef2eb5

General

Target

eb2902f3c06a64b2183111af02aae3ff38b6b2fb9d71672793d6cdb40eef2eb5
Size

156KB
MD5

45626244573ec90ef64cf13b0216d2b8
SHA1

9bb2aeba061a6ea438f954a4f94b5f7e996db5fe
SHA256

eb2902f3c06a64b2183111af02aae3ff38b6b2fb9d71672793d6cdb40eef2eb5
SHA512

c749f3376970d5d782b6e010f59dfd2d672fbecd346ade6d574ac2f244565156767f25b9be2b277102a198445fc4acf4de11bfb68b88f758fcd1598376c8b3a7
SSDEEP

768:9xoscDc29tk6I8pm+t597fCZECOPuZQ0YnJLvJbFS7yMRadEloHW:vohXbpt597fGNZjYnJLtqlRago2

Score

N/A

Malware Config

Signatures

Files

eb2902f3c06a64b2183111af02aae3ff38b6b2fb9d71672793d6cdb40eef2eb5
.exe windows x86

ef4e22099c3dbb06bb1c499b071c4fc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
LoadLibraryA
GetProcAddress
MapViewOfFile
GetLastError
CreateFileMappingW
GetConsoleTitleA
AllocConsole
FreeConsole
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
GetFileType
GetStartupInfoA
LCMapStringW
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
FreeLibrary
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
LCMapStringA
SetStdHandle
HeapDestroy
HeapCreate
HeapFree
VirtualFree
IsBadWritePtr
IsBadReadPtr
HeapValidate
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer

user32

SendMessageW
FindWindowA

Sections

.text
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef4e22099c3dbb06bb1c499b071c4fc5

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 128KB - Virtual size: 124KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 128KB - Virtual size: 124KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 3KB