eb8785b188ba7dd8a23f49a7d18136cf45f31609c3feddca83a18c4895391ed3

Sharing

Copy URL Twitter E-mail

General

Target

eb8785b188ba7dd8a23f49a7d18136cf45f31609c3feddca83a18c4895391ed3
Size

76KB
MD5

730cc61107eb84aa059cbfe6dd0fcc8b
SHA1

150cde0ef300a272193527ee9df8afb448acb1a8
SHA256

eb8785b188ba7dd8a23f49a7d18136cf45f31609c3feddca83a18c4895391ed3
SHA512

9d79857f7ce2cfdccb13b0ff2e7dd4b002105207c049a3224af7c9b442e1d3eb90159ae496142f1c6e6d801ef5ad5e7a36bc0b89d6d68a5b994ecdc2f80d8ff9
SSDEEP

1536:2JB+eZdjXJ9UayWbeTuUfRHujquvZw/mCrt9J:0+eZdbJ5b6Tfpqv6/Rrt9J

Score

N/A

Malware Config

Signatures

Files

eb8785b188ba7dd8a23f49a7d18136cf45f31609c3feddca83a18c4895391ed3
.exe windows x86

3fecc804b34b58c925f33ee1a04cfb52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetVersion
ReadFile
GetFileSize
CreateFileW
GetSystemInfo
GetProcessTimes
SystemTimeToFileTime
GetSystemTime
GetDriveTypeA
GetVersionExA
GetLastError
CreateProcessW
GetTempFileNameW
GetTempPathW
GetLogicalDrives
ReleaseMutex
CreateMutexA
OpenProcess
CreateRemoteThread
GetExitCodeThread
WaitForSingleObject
GetModuleHandleA
lstrlenA
DuplicateHandle
GetCurrentProcess
VirtualFreeEx
VirtualAllocEx
WriteProcessMemory
CompareStringW
CompareStringA
SetEndOfFile
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileA
FreeLibrary
CloseHandle
LoadLibraryA
GetVolumeInformationA
GetProcAddress
FlushFileBuffers
SetEnvironmentVariableA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
GetTimeZoneInformation
GetLocalTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
TerminateProcess
HeapAlloc
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr

user32

GetSysColor
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
GetKeyboardType
GetCaretPos

advapi32

RegQueryInfoKeyA
RegEnumValueW
RegCloseKey
RegOpenKeyExW

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

urlmon

UrlMkGetSessionOption

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fecc804b34b58c925f33ee1a04cfb52

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

urlmon

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 1KB