e1895ca9674e54153e9a5db43f51429053fd0c7ca5b90c1390cd7acc440f0e6c

Sharing

Copy URL Twitter E-mail

General

Target

e1895ca9674e54153e9a5db43f51429053fd0c7ca5b90c1390cd7acc440f0e6c
Size

463KB
MD5

ebed72b2b773aeb14b0db1d2668e6f2f
SHA1

552a9fd84a4c33f7ba6377b9881c7493e0fcd7ff
SHA256

e1895ca9674e54153e9a5db43f51429053fd0c7ca5b90c1390cd7acc440f0e6c
SHA512

9d9ea3e9ccd38887523fed03f25cb00d26120dd6d3d52b16a235633cde87f340dd4c60758f70a89c5571c15c9f0e8ff63f376d5369cd075fc09d33dae7f4169c
SSDEEP

12288:wHLVA1ou0P9Cplvp1p/R8KSiijaJyKj5Bkw2mvN1k2KB:wHLRuaolvtR8KSTa3kw2ON1k2K

Score

N/A

Malware Config

Signatures

Files

e1895ca9674e54153e9a5db43f51429053fd0c7ca5b90c1390cd7acc440f0e6c
.exe windows x86

9801829b4f20e3cd550d9ef19ad244a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

OleSaveToStream

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

quartz

AMGetErrorTextA

wsock32

WSACleanup

Sections

CODE
Size: - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp1
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 456KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9801829b4f20e3cd550d9ef19ad244a4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

shell32

quartz

wsock32

Sections

CODE Size: - Virtual size: 608KB

DATA Size: - Virtual size: 23KB

BSS Size: - Virtual size: 9KB

.idata Size: - Virtual size: 11KB

.tls Size: - Virtual size: 20B

.rdata Size: 512B - Virtual size: 24B

.vmp0 Size: - Virtual size: 34KB

.rsrc Size: 4KB - Virtual size: 4KB

.vmp1 Size: - Virtual size: 45KB

.vmp2 Size: 456KB - Virtual size: 456KB

.reloc Size: 512B - Virtual size: 112B

CODE
Size: - Virtual size: 608KB

DATA
Size: - Virtual size: 23KB

BSS
Size: - Virtual size: 9KB

.idata
Size: - Virtual size: 11KB

.tls
Size: - Virtual size: 20B

.rdata
Size: 512B - Virtual size: 24B

.vmp0
Size: - Virtual size: 34KB

.rsrc
Size: 4KB - Virtual size: 4KB

.vmp1
Size: - Virtual size: 45KB

.vmp2
Size: 456KB - Virtual size: 456KB

.reloc
Size: 512B - Virtual size: 112B