e3a1f61968e6f4b58bfc37a5aa5622f1bd83c315e8f1a681ca9b0345a639a0ac

Sharing

Copy URL Twitter E-mail

General

Target

e3a1f61968e6f4b58bfc37a5aa5622f1bd83c315e8f1a681ca9b0345a639a0ac
Size

254KB
MD5

a0d9fbe08f05534eaa19322492d1f474
SHA1

1cca748a678759e4e628eaf7643232a4e14d9e6d
SHA256

e3a1f61968e6f4b58bfc37a5aa5622f1bd83c315e8f1a681ca9b0345a639a0ac
SHA512

ef6800519c608c81e15ecd5d30943e4b3ca50d5cf63c221a3c199ad1236eacfd9ce5551479b03f66b32992eb37d76a700ecc78d3ea74d7b1e209ab5a2c97915f
SSDEEP

3072:t/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:pwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

Score

N/A

Malware Config

Signatures

Files

e3a1f61968e6f4b58bfc37a5aa5622f1bd83c315e8f1a681ca9b0345a639a0ac
.exe windows x86

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PatBlt
GetObjectW
CreateDCW
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
DeleteObject

kernel32

LeaveCriticalSection
HeapFree
IsDebuggerPresent
LockResource
EnterCriticalSection
lstrcmpiW
HeapSize
GetModuleHandleW
CreateFileW
RaiseException
GetFileSize
SystemTimeToTzSpecificLocalTime
DeleteCriticalSection
FindClose
LocalAlloc
FindFirstFileW
lstrlenW
GetTimeZoneInformation
FormatMessageW
UnhandledExceptionFilter
EnumResourceNamesW
SizeofResource
GetCurrentThreadId
FindResourceExW
GetSystemTime
LoadResource
FindResourceW
HeapDestroy
LocalFree
HeapAlloc
GetSystemTimeAsFileTime
ReadFile
SetUnhandledExceptionFilter
OutputDebugStringW
FreeLibrary
ProcessIdToSessionId
GetProcessHeap
CloseHandle
HeapReAlloc
SystemTimeToFileTime
LoadLibraryExW
CompareFileTime
VirtualAllocEx

ole32

CoTaskMemRealloc
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VarUI4FromStr

user32

CharNextW
GetForegroundWindow
AllowSetForegroundWindow
DestroyIcon
GetSystemMetrics
GetDesktopWindow
DrawIconEx
GetActiveWindow
LoadImageW

esent

JetFreeBuffer
JetCloseFile
JetDupCursor
JetGetDatabaseFileInfo
JetCreateDatabase2
JetMakeKey
JetCreateInstance
JetDefragment
JetSetLS
JetOpenTempTable3
JetAddColumn
JetInit2
JetEnumerateColumns
JetTerm2
JetDeleteIndex
JetMove
ese

wmpshell

DllRegisterServer
DllCanUnloadNow

Sections

.YolX
Size: 1KB - Virtual size: 27KB

IMAGE_SCN_MEM_READ

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UrnGiP
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.awBQJUL
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.slUCrgA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GdUqi
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fvTRZ
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mHTN
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GjQNcMz
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZJhdvo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sIVhg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

oleaut32

user32

esent

wmpshell

Sections

.YolX Size: 1KB - Virtual size: 27KB

.text Size: 17KB - Virtual size: 17KB

.UrnGiP Size: 1KB - Virtual size: 1KB

.awBQJUL Size: 2KB - Virtual size: 1KB

.slUCrgA Size: 2KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 61KB

.GdUqi Size: 2KB - Virtual size: 2KB

.rdata Size: 208KB - Virtual size: 207KB

.fvTRZ Size: 1024B - Virtual size: 790B

.mHTN Size: 512B - Virtual size: 396B

.rsrc Size: 5KB - Virtual size: 4KB

.GjQNcMz Size: 512B - Virtual size: 266B

.ZJhdvo Size: 1KB - Virtual size: 1KB

.sIVhg Size: 2KB - Virtual size: 2KB

.YolX
Size: 1KB - Virtual size: 27KB

.text
Size: 17KB - Virtual size: 17KB

.UrnGiP
Size: 1KB - Virtual size: 1KB

.awBQJUL
Size: 2KB - Virtual size: 1KB

.slUCrgA
Size: 2KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 61KB

.GdUqi
Size: 2KB - Virtual size: 2KB

.rdata
Size: 208KB - Virtual size: 207KB

.fvTRZ
Size: 1024B - Virtual size: 790B

.mHTN
Size: 512B - Virtual size: 396B

.rsrc
Size: 5KB - Virtual size: 4KB

.GjQNcMz
Size: 512B - Virtual size: 266B

.ZJhdvo
Size: 1KB - Virtual size: 1KB

.sIVhg
Size: 2KB - Virtual size: 2KB