e10e2715df68c7ec8df2e44452e8931215171fb98ffc3d5c4015a7cf94af70ad

Sharing

Copy URL Twitter E-mail

General

Target

e10e2715df68c7ec8df2e44452e8931215171fb98ffc3d5c4015a7cf94af70ad
Size

132KB
MD5

9d4584188b58f5df914b3522d29ad65b
SHA1

28ffa319c1f8d2e8066ad5803f05f7e597feeb11
SHA256

e10e2715df68c7ec8df2e44452e8931215171fb98ffc3d5c4015a7cf94af70ad
SHA512

3d78614feb114aa2f943f9911be3acada1ed64f136ec941446c8bd5d6857def462da0458b800ef58b30d5d98a18926ebe89d79ddff010cb76a02e8310c016a9c
SSDEEP

3072:xMZA4XoGJ42k62s8lrEw1s2Y9bM7KvsJD2U:sTXo04GEhH1MI7r3

Score

N/A

Malware Config

Signatures

Files

e10e2715df68c7ec8df2e44452e8931215171fb98ffc3d5c4015a7cf94af70ad
.exe windows x86

df9f2b5e8d5e3e5964047e67290c1410

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GetCurrentThread
HeapAlloc
GetSystemInfo
GetProfileSectionA
PulseEvent
GetProfileStringA
SetConsoleCtrlHandler
GetPriorityClass
GetLocaleInfoA
GetGeoInfoA
LZOpenFileW
FatalAppExitA
GetOEMCP
LoadLibraryW
GetConsoleCommandHistoryA
WriteProfileSectionA
RegisterWowExec
FatalExit
GetModuleHandleW
SetNamedPipeHandleState
DisconnectNamedPipe

msvcrt

exit
putwc
_mbctohira
_stat
_ismbcl2
_makepath
_ecvt
_futime64
_fileno
__p__commode
_mktemp
_wcsset
__set_app_type
_filelengthi64
_strtime
_adj_fdivr_m32i
_stricoll
__getmainargs
_splitpath
_lfind
_wchdir
_adj_fdiv_m32
_swab
isalnum
_CIatan
__RTDynamicCast
___setlc_active_func

shlwapi

DllGetVersion
SHRegOpenUSKeyA
UrlGetPartA
PathRemoveBackslashW
PathBuildRootW
GetMenuPosFromID
PathMakePrettyA
UrlIsOpaqueA
PathAppendA
SHSetValueW
UrlIsA
SHGetValueW

esent

JetAttachDatabase
JetMakeKey@20
JetOpenFile
JetAttachDatabase2
JetCompact
JetGetTableIndexInfo
JetOpenDatabase
JetPrepareToCommitTransaction
JetReadFileInstance
JetBackup
JetEndExternalBackup
JetTruncateLogInstance
JetBeginTransaction@4
JetSetLS
JetBeginTransaction2
JetSeek
JetGetLS
JetEnumerateColumns
JetCloseFileInstance
JetInit
JetSetTableSequential
JetOSSnapshotFreeze

wshrm

WSHSetSocketInformation
WSHJoinLeaf
WSHEnumProtocols
WSHGetSockaddrType
WSHGetProviderGuid
WSHOpenSocket
WSHGetWildcardSockaddr
WSHNotify
WSHGetWSAProtocolInfo
WSHAddressToString
WSHGetWinsockMapping
WSHStringToAddress
WSHIoctl
WSHGetBroadcastSockaddr
WSHGetSocketInformation
WSHOpenSocket2

resutils

ResUtilSetBinaryValue
ResUtilSetResourceServiceEnvironment
ResUtilIsPathValid
ResUtilFindDwordProperty
ClusWorkerCreate
ResUtilEnumProperties
ResUtilVerifyPrivatePropertyList
ResUtilGetResourceDependencyByClass
ResUtilStopService
ResUtilFreeEnvironment
ResUtilFreeParameterBlock
ResUtilGetDwordValue
ResUtilPropertyListFromParameterBlock
ResUtilSetSzValue

user32

DefWindowProcW
RegisterClassW
PostQuitMessage

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df9f2b5e8d5e3e5964047e67290c1410

Headers

File Characteristics

Imports

kernel32

msvcrt

shlwapi

esent

wshrm

resutils

user32

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 5KB - Virtual size: 5KB