be02a55aa76c95dc9a476854817699250928cbfd699f3bbc339204257a0bc2b0

Sharing

Copy URL Twitter E-mail

General

Target

be02a55aa76c95dc9a476854817699250928cbfd699f3bbc339204257a0bc2b0
Size

128KB
MD5

cbdaf110533d9ccb7be2721a2d9dde4e
SHA1

3022c0600f656387719c66849218b0803d7c45ff
SHA256

be02a55aa76c95dc9a476854817699250928cbfd699f3bbc339204257a0bc2b0
SHA512

09f30385d994bca9545cc58d3261a1e3fc6648e6324a230cabab75175833e890419ee7e4be69de795e597eda7cce9a1b3be87fce638e71f4aabac95f918b94b5
SSDEEP

3072:YvsoS4Fdbrctcnjg43IGWG7sxnV44JwQVFh:EfAYIG674LQVF

Score

N/A

Malware Config

Signatures

Files

be02a55aa76c95dc9a476854817699250928cbfd699f3bbc339204257a0bc2b0
.exe windows x86

ec99e75f16531c506165634ae6556f16

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
QueryPerformanceCounter
MultiByteToWideChar
LeaveCriticalSection
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapDestroy
GetVersionExA
GetTickCount
GetSystemTimeAsFileTime
GetModuleHandleA
GetModuleFileNameA
GetCurrentProcessId
GetCurrentProcess
EnterCriticalSection
Sleep
CreateThread
CreateFileA
CreateEventA
GetProcAddress
ExitProcess
GetCommandLineA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetStringTypeW
RtlUnwind
UnhandledExceptionFilter
lstrcmpiA
LocalAlloc
LocalFree
GetProcessHeap
HeapAlloc
HeapFree
ReadFile
GetLastError
FlushFileBuffers
DisconnectNamedPipe
CloseHandle
lstrcpyA
DeleteCriticalSection
lstrlenA
VirtualFree
HeapCreate
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
TerminateProcess
GetStartupInfoA
GetVersion

user32

GetWindowTextLengthA
wsprintfA
TranslateMessage
SetTimer
PostQuitMessage
PostMessageA
PeekMessageA
MessageBoxA
KillTimer
GetParent
BeginPaint

advapi32

RegEnumKeyExA
GetLengthSid
GetTokenInformation
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
AllocateAndInitializeSid
SetEntriesInAclA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
FreeSid
RegCloseKey
RegQueryInfoKeyA

ole32

CoGetMalloc
CoUninitialize
CoInitialize
OleRun
OleSetClipboard
OleSaveToStream
CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec99e75f16531c506165634ae6556f16

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 100KB - Virtual size: 101KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 100KB - Virtual size: 101KB

.reloc
Size: 4KB - Virtual size: 3KB