e2c655a3a44594eeb54fe2f34d11b2735c61dd238063f9061c18ae476b7733c5

Sharing

Copy URL Twitter E-mail

General

Target

e2c655a3a44594eeb54fe2f34d11b2735c61dd238063f9061c18ae476b7733c5
Size

306KB
MD5

0c84b93ae8469e7b23b422eda76a8c0f
SHA1

fb87bd1dcb1da1e53ddbbfe1fff264371e6d2b6c
SHA256

e2c655a3a44594eeb54fe2f34d11b2735c61dd238063f9061c18ae476b7733c5
SHA512

283849e26608b93dcefb7ad72b423561b36f429e3ded87a3e058a820a0f7e1c04ed97455bb35d1763ef740cd72763114521cb479187c645db22559ff84419f6a
SSDEEP

6144:Z/oMmlhkgERGfNFR7wY2V2CwbGC7nX0XY1U84ZEEL/17KajQ6FXfgx:ZhEPVwYwOGbXY1pclb1p82v

Score

N/A

Malware Config

Signatures

Files

e2c655a3a44594eeb54fe2f34d11b2735c61dd238063f9061c18ae476b7733c5
.exe windows x86

914a3d037d59be25f19b4acff071b87b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
CloseHandle
SetUnhandledExceptionFilter
WideCharToMultiByte
ReadFile
GetCurrentThreadId
CreateFileW
MapViewOfFile
GetFileSize
SetLastError
GetSystemDefaultLangID
SetFilePointer
FreeLibrary
GetLocalTime
FreeEnvironmentStringsA
GlobalMemoryStatus
HeapAlloc
ResetEvent
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
DeleteCriticalSection
LocalAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetProcessHeap
GetModuleHandleW
FileTimeToSystemTime
UnmapViewOfFile
GetDiskFreeSpaceA
CreateEventW
UnhandledExceptionFilter
HeapFree
CreateFileMappingW
VirtualProtect
WaitForSingleObject
DeviceIoControl
FreeEnvironmentStringsW
VirtualFree
lstrlenA
lstrlenW
LocalFree
IsProcessorFeaturePresent
HeapCreate
VirtualAllocEx

msvcrt

wcsstr
_itow
time
_ui64tow
wcsncmp
memset
_initterm
_lock
_vsnwprintf
wcschr
srand
malloc
_onexit
_unlock
__dllonexit
_wtoi
_purecall
rand
memmove
_wcsnicmp
memcpy
_amsg_exit
_XcptFilter
free

rpcrt4

RpcStringFreeW
UuidFromStringW
I_RpcMapWin32Status
UuidToStringW

advapi32

CryptDestroyKey
CryptAcquireContextW
CryptExportKey
CryptDecrypt
CryptEncrypt
CryptDestroyHash
CryptVerifySignatureA
RegSetValueExA
RegCreateKeyExA
TraceEvent
CryptImportKey
RegQueryValueExA
CryptGenKey
CryptGetHashParam
CryptReleaseContext
CryptCreateHash
CryptSignHashA
RegCloseKey
CryptHashData

ntdll

RtlUnwind

user32

GetDC
LoadBitmapW
GetMenuInfo
MessageBeep
SetWindowLongW
WaitForInputIdle
GetSystemMetrics
GetSysColor
EnableMenuItem
DialogBoxIndirectParamA
SetWindowPos
WaitMessage
GetMenuItemInfoA
RegisterWindowMessageW
DestroyCursor

gdi32

GetTextColor

localsec

DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 410KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

914a3d037d59be25f19b4acff071b87b

Headers

File Characteristics

Imports

kernel32

msvcrt

rpcrt4

advapi32

ntdll

user32

gdi32

localsec

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 268KB - Virtual size: 410KB

.rdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 13KB - Virtual size: 38KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 268KB - Virtual size: 410KB

.rdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 13KB - Virtual size: 38KB