e84e8b9908cb51e4fbcab532613e401b7a3ca11b7d89dc834f31e73c0da61512

Sharing

Copy URL Twitter E-mail

General

Target

e84e8b9908cb51e4fbcab532613e401b7a3ca11b7d89dc834f31e73c0da61512
Size

153KB
MD5

c62dcc7b8c77bc9410a761aa4e5d10c4
SHA1

6c812c9e2ea7be32d25996debafa9a6c7d0ebc83
SHA256

e84e8b9908cb51e4fbcab532613e401b7a3ca11b7d89dc834f31e73c0da61512
SHA512

39ee116c57f1ecda2f30ef7717b0d39dba5c99bf905d6f20c07124f2205a63c720b704c52f642f7f47acb9d6097afe7c4aed71a2c8e2f0bc408058392929242c
SSDEEP

3072:M6MVsrQE8AJRohpKvEF6ZoKL5LpAoqzNJySPzvSMgtA:MExLcoZttgJ10A

Score

N/A

Malware Config

Signatures

Files

e84e8b9908cb51e4fbcab532613e401b7a3ca11b7d89dc834f31e73c0da61512
.exe windows x86

1935848c1512d7477f73e22cae6f1fd2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleRegGetUserType
CoInitializeEx
CoRegisterClassObject
CoSetProxyBlanket
CoFreeUnusedLibraries
CoUninitialize
CLSIDFromString

msvcrt

_onexit
wcscmp
_errno
_c_exit
realloc
_except_handler3
_vsnprintf
__p__commode
malloc
free

ntdll

NtFreeVirtualMemory

gdi32

SetMapMode
DeleteMetaFile
GetStockObject
CreateRectRgnIndirect
CreateFontIndirectA
Rectangle
StartPage
StartPage
GetWindowExtEx
GetBkMode
ExtTextOutA
PlayEnhMetaFile
GetDIBits
CreateRectRgnIndirect
ScaleWindowExtEx
CreateFontIndirectA
GetDeviceCaps
GetTextColor

user32

SetWindowLongA
EnableMenuItem

kernel32

GetCommandLineA
GetModuleHandleA
VirtualFree
VirtualAlloc
GetCurrentThreadId
HeapDestroy
FreeLibrary
GetTickCount
GetSystemTimeAsFileTime
LoadLibraryW
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleW
InterlockedCompareExchange
LocalFree
GetCurrentProcess
GetModuleHandleA
GetCommandLineA
VirtualFree
GetEnvironmentStringsW
GetCurrentProcess
GetPrivateProfileStringW
IsValidCodePage
VirtualAlloc
TerminateThread
GetLastError
FileTimeToLocalFileTime
ExitProcess
GetTickCount

advapi32

OpenThreadToken
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenProcessToken
CloseServiceHandle
RegDeleteValueW

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 51KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1935848c1512d7477f73e22cae6f1fd2

Headers

DLL Characteristics

File Characteristics

Imports

ole32

msvcrt

ntdll

gdi32

user32

kernel32

advapi32

version

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 14KB - Virtual size: 41KB

.rdata Size: 53KB - Virtual size: 346KB

.bss Size: 51KB - Virtual size: 87KB

.rsrc Size: 26KB - Virtual size: 26KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 14KB - Virtual size: 41KB

.rdata
Size: 53KB - Virtual size: 346KB

.bss
Size: 51KB - Virtual size: 87KB

.rsrc
Size: 26KB - Virtual size: 26KB