ecee804ab98895f8a562ded834891c4d72783ae45ff6fdb893f91db97e217c9a

General

Target

ecee804ab98895f8a562ded834891c4d72783ae45ff6fdb893f91db97e217c9a
Size

185KB
MD5

cdf6542913ba9e793d53b5453e496001
SHA1

ee1705836cfbb3e784967bd9ae02783503f5126b
SHA256

ecee804ab98895f8a562ded834891c4d72783ae45ff6fdb893f91db97e217c9a
SHA512

721a5b572f0093aa9529c5afe9b0642326ca5af14a7e55bd0169f9df874801f957a172f5b6a1c72c762937bae1f8e93652814b698ae87a9fd81e2824861d0af2
SSDEEP

3072:LWMaXtJDQkKuHfpefTuR+zmRpAqa3DoiWzqQZO2pJEOeleBMUIIT:LWM+lQk/BefU+zmsqazSfRvele4U

Score

N/A

Malware Config

Signatures

Files

ecee804ab98895f8a562ded834891c4d72783ae45ff6fdb893f91db97e217c9a
.exe windows x86

eda053fae0b5f85f90305b59b0709811

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

TlsAlloc
TerminateProcess
FreeEnvironmentStringsA
SetLastError
GetSystemInfo
HeapDestroy
AddAtomA
InterlockedExchange
IsBadWritePtr
VirtualFree
GetVersionExA
VirtualAlloc
GetCPInfo
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsSetValue
TlsFree
GetLocaleInfoA
EnumResourceLanguagesA
GetCurrentProcessId
FreeEnvironmentStringsW
SetEndOfFile
VirtualQuery
GetFileType
GetEnvironmentStringsW
GetOEMCP
lstrcpyW
TlsGetValue
GetStartupInfoA
HeapCreate
HeapSize
UnhandledExceptionFilter
GetStdHandle
WriteFile
GetCurrentProcess
GetEnvironmentStrings
SetHandleCount
GetACP
SetUnhandledExceptionFilter

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shell32

SHGetFolderPathW

user32

GetDlgItem
SendMessageA
DestroyWindow
CreateWindowExW
IsWindow
EnumChildWindows
GetWindowThreadProcessId

Sections

.text
Size: 93KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eda053fae0b5f85f90305b59b0709811

Headers

File Characteristics

Imports

iphlpapi

newdev

kernel32

mprapi

setupapi

shell32

user32

Sections

.text Size: 93KB - Virtual size: 237KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 88KB - Virtual size: 87KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 237KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 88KB - Virtual size: 87KB

.rsrc
Size: 512B - Virtual size: 4KB