e2479b537306ff93a93b117990bcf36e83970f95773f4994ca65e8260d5f2135

Sharing

Copy URL

Twitter E-mail

General

Target

e2479b537306ff93a93b117990bcf36e83970f95773f4994ca65e8260d5f2135
Size

616KB
MD5

606ed5955557a810644087da743d0f01
SHA1

5cd215cce4c7d9d330a3004fe1a3d7a6a0078f61
SHA256

e2479b537306ff93a93b117990bcf36e83970f95773f4994ca65e8260d5f2135
SHA512

5dcec19b98fdec3fc44c6b887ef9e82c0df1eb217af97f3bc22276f3f6784997876fbffe04cd911d7de54434a8d9be374ed1654aa6ef8bc1f2e1ae57771cbef2
SSDEEP

12288:8FC+rRu7St8E3/XyUztjT5Rkw3RUj1vWtW5/KbQGc:8JrCORtLkyU8tWRwa

Score

N/A

Malware Config

Signatures

Files

e2479b537306ff93a93b117990bcf36e83970f95773f4994ca65e8260d5f2135
.exe windows x86

3296e7e384fe855567681bcb0f77cf4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

CommandLineToArgvW

kernel32

TlsAlloc
VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
OutputDebugStringA
WideCharToMultiByte
GetCommandLineW
GetModuleFileNameA
TerminateProcess
WaitForSingleObject
ResumeThread
SetThreadContext
WriteProcessMemory
GetProcAddress
GetModuleHandleA
VirtualProtectEx
VirtualAllocEx
VirtualAlloc
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
MultiByteToWideChar
ReadFile
SetFilePointer
RaiseException
RtlUnwind
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
HeapSize
CloseHandle
CreateFileA
InitializeCriticalSection
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile

user32

MessageBoxA

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Smiley
Size: 4KB - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3296e7e384fe855567681bcb0f77cf4b

Headers

File Characteristics

Imports

shell32

kernel32

user32

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 11KB

.Smiley Size: 4KB - Virtual size: 240B

.rsrc Size: 36KB - Virtual size: 35KB

. Size: 252KB - Virtual size: 252KB

. Size: 252KB - Virtual size: 252KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 11KB

.Smiley
Size: 4KB - Virtual size: 240B

.rsrc
Size: 36KB - Virtual size: 35KB

.
Size: 252KB - Virtual size: 252KB

.
Size: 252KB - Virtual size: 252KB