1eb074b887b72e9eacded03b66438c8c55e1a2a4fa03e85c826d51b9d77f0c40

Sharing

Copy URL Twitter E-mail

General

Target

1eb074b887b72e9eacded03b66438c8c55e1a2a4fa03e85c826d51b9d77f0c40
Size

148KB
MD5

21c52d5167d2b7c17858124caa586d69
SHA1

f8b8b6b90e67fe9d22d8d71af5a1cdf36794f529
SHA256

1eb074b887b72e9eacded03b66438c8c55e1a2a4fa03e85c826d51b9d77f0c40
SHA512

e34ac1bc929af67c94f8d8fb78babb06521ddfcc94cf2fd841623a96665e41b26e137be3b1082b8d3bab70c07a94c4805ee9b9e3b10c94ee1133420ee87de105
SSDEEP

1536:9/Xqkso/C3xirJ27hEDrLJWRGCMtvcpf4et0p+e85tVkh9ohybNsu9KF:VHrah4UjKcl4l+Tthh7

Score

N/A

Malware Config

Signatures

Files

1eb074b887b72e9eacded03b66438c8c55e1a2a4fa03e85c826d51b9d77f0c40
.exe windows x86

aff840014624200bfe56f81aee1cde47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
Sleep
DeleteFileA
WriteFile
GetTickCount
GetProcAddress
GetModuleHandleA
GetLastError
SuspendThread
CloseHandle
LoadLibraryA
ResumeThread
VirtualQuery
GetSystemInfo
VirtualProtect
FlushFileBuffers
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
SetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

LoadCursorW
DestroyWindow
wsprintfA

gdi32

CreatePen

ws2_32

recv
select
send

winmm

mciSendCommandA

winscard

SCardConnectA

Exports

Exports

?hLOUD@@YAKK@Z

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aff840014624200bfe56f81aee1cde47

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ws2_32

winmm

winscard

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 48KB - Virtual size: 52KB

.tls Size: 4KB - Virtual size: 100B

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 48KB - Virtual size: 52KB

.tls
Size: 4KB - Virtual size: 100B

.rsrc
Size: 16KB - Virtual size: 13KB