e8be4b48b07525771837dafd78268605b7b3ad265a68a1f6e3c63f8c0e3dfaf9

General

Target

e8be4b48b07525771837dafd78268605b7b3ad265a68a1f6e3c63f8c0e3dfaf9
Size

800KB
MD5

395466e2fc75cae8acc5f2f20e16bc60
SHA1

6edd632055f581bf0dcb8efc9f77a77b9c45e609
SHA256

e8be4b48b07525771837dafd78268605b7b3ad265a68a1f6e3c63f8c0e3dfaf9
SHA512

b88f307de48eac36d06af87e9a79200fc94716b4f111dc1e6a4bd092f6b9e2bccd78f4a894d09d387015bb5de685e4f0ba64f9a90678d8c19b0249e78c11a954
SSDEEP

24576:C+CZ4PXJ8ddCmF4aKsGsmk3dFtKbw7MP:C+CMe1FgHk3dFt0XP

Score

N/A

Malware Config

Signatures

Files

e8be4b48b07525771837dafd78268605b7b3ad265a68a1f6e3c63f8c0e3dfaf9
.exe windows x86

316ec5f6cf2ec4e65c8a9c1daf60c797

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

TlsGetValue
CreateEventW
ClearCommBreak
GetStringTypeW
GetPrivateProfileSectionA
DeleteFileA
DeviceIoControl
GetPrivateProfileIntW
VirtualProtectEx
GetProcessHeap
GetCurrentThread
CreateMutexW
ResumeThread
SetLastError
DeviceIoControl
GetFileAttributesW
HeapDestroy
LoadLibraryW
GetDriveTypeA
lstrlenA
HeapFree

clbcatq

DllGetClassObject
SetupOpen
SetSetupSave
CheckMemoryGates
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
SetupOpen
CheckMemoryGates
SetSetupSave
ComPlusMigrate
SetupOpen
ComPlusMigrate

pdh

PdhGetLogFileSize
PdhGetLogFileTypeA
PdhCloseLog
PdhAddCounterA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 794KB - Virtual size: 794KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

316ec5f6cf2ec4e65c8a9c1daf60c797

Headers

File Characteristics

Imports

kernel32

clbcatq

pdh

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 1.4MB

.rsrc Size: 794KB - Virtual size: 794KB

.orpc Size: 512B - Virtual size: 28KB

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 1.4MB

.rsrc
Size: 794KB - Virtual size: 794KB

.orpc
Size: 512B - Virtual size: 28KB