e0f81a2a3db2936d98bec28b62d0d9ef08674a89f1111a73de0647ac6c77f80b

Sharing

Copy URL Twitter E-mail

General

Target

e0f81a2a3db2936d98bec28b62d0d9ef08674a89f1111a73de0647ac6c77f80b
Size

64KB
MD5

5e05c33d5ed4ec9caa2341b73de2fc31
SHA1

b4b0db0145e8bcbe2ffed90d08982b0712d96a52
SHA256

e0f81a2a3db2936d98bec28b62d0d9ef08674a89f1111a73de0647ac6c77f80b
SHA512

55be13b4d9e6cdef466601ec15a319136fa1b2816ec79aba758f3e8f66517b8c58cc85814fc31307920bcacb68d149612d9ecd1f2d772ed0c5ba8483d7e045c6
SSDEEP

768:g92uIX6+AvdfuOAJF3qLEm+bxTO8Hb4HmH/FZM4CNz5z7kNf9OGIWl7xvdeVcuz:g9SBAt2m+bxTO8Hb4HmHIHNh49ZlPzu

Score

N/A

Malware Config

Signatures

Files

e0f81a2a3db2936d98bec28b62d0d9ef08674a89f1111a73de0647ac6c77f80b
.exe windows x86

dd2c2b89936a413ef384801cd5c06205

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
SetFilePointer
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
CloseHandle
WriteFile
Sleep
WinExec
GetSystemDirectoryA
GetTickCount
DeleteFileA
GetComputerNameA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetOEMCP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
CreateDirectoryA

user32

SetTimer
wsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassA
LoadIconA
GetForegroundWindow
GetAncestor
GetClassNameA
GetWindowTextA
LoadCursorA
GetWindowRect
GetClientRect
PostQuitMessage
GetDesktopWindow
BeginPaint
EndPaint
DefWindowProcA
MessageBoxA
KillTimer
FindWindowA
SendMessageA

gdi32

GetStockObject

advapi32

RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

wininet

InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle

netapi32

Netbios

shlwapi

StrStrIA

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dd2c2b89936a413ef384801cd5c06205

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

wininet

netapi32

shlwapi

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 4KB

.aspack Size: 7KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 4KB

.aspack
Size: 7KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB