e27c133034cf64718300434f2fec5b8b06e4f6dc049c1b76967288bd2b663692

Sharing

Copy URL Twitter E-mail

General

Target

e27c133034cf64718300434f2fec5b8b06e4f6dc049c1b76967288bd2b663692
Size

68KB
MD5

ef6026c6c776ed3b625a02c01a803aa8
SHA1

4d06c6a59b93b77af29361fbcb314a0d59c6d70c
SHA256

e27c133034cf64718300434f2fec5b8b06e4f6dc049c1b76967288bd2b663692
SHA512

6ead28f1b405335ba82cd5fd53648fdcdeaebb446e5af9eb13578db323978bbd34baaa93c0eb42dcc8c3e9f6b4bcc7b1796fb3f72905c27e423a1ef1f6de8dd3
SSDEEP

1536:TgtWaW7jcIVs0XJTfa9LCZSwAxCoKsCG+gOHycjMQd:xS7coKjz

Score

N/A

Malware Config

Signatures

Files

e27c133034cf64718300434f2fec5b8b06e4f6dc049c1b76967288bd2b663692
.exe windows x86

676103c2cb701f05f4d6e26686c06370

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
CreateThread
Sleep
TerminateThread
FindResourceA
RemoveDirectoryA
DeleteFileA
TerminateProcess
OpenProcess
LoadResource
GetCurrentProcess
LockResource
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
CreateFileA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
SetFilePointer
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetStringTypeW
FreeEnvironmentStringsW
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
GetLastError
CloseHandle
WriteFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA

advapi32

OpenProcessToken
CreateProcessAsUserA

user32

ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetClassNameA
CloseDesktop
CreateDesktopA
EnumDesktopWindows
SetWindowLongA
IsWindowVisible
IsWindowEnabled
GetWindowTextA
EnumChildWindows
SendMessageA
DefWindowProcA
RegisterClassA
CreateWindowExA
GetWindowLongA

shell32

ShellExecuteA
SHGetSpecialFolderPathA

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA

psapi

EnumProcessModules
GetModuleFileNameExA
EnumProcesses

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

676103c2cb701f05f4d6e26686c06370

Headers

File Characteristics

Imports

kernel32

advapi32

user32

shell32

wininet

psapi

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 24KB - Virtual size: 20KB