ec9f891979438627e4873e13de93969d6a7b0fbcc1022c9a9958f03ca9c7a444

Sharing

Copy URL

Twitter E-mail

General

Target

ec9f891979438627e4873e13de93969d6a7b0fbcc1022c9a9958f03ca9c7a444
Size

296KB
MD5

07189488c31b5aa3701e23ea0b4d7b61
SHA1

3b09db9dc498143a38664dfa1b7e7094762c14a4
SHA256

ec9f891979438627e4873e13de93969d6a7b0fbcc1022c9a9958f03ca9c7a444
SHA512

8ff209023c605a4f0a989019683db260f1ecf1da753ddc184eb1681ed23b9fc5cb6883f3cb71b6f20d883d3ddaa12da4ac6d49562843f21e5a5484e2d69432ff
SSDEEP

6144:EXOIo5jbXkWh1aXtGqiM2jMCoMZF7UAVLGaiqhjTIZj4ej04vWIIpr:EXkZw/XYxMvQFAa7AZsNIW

Score

N/A

Malware Config

Signatures

Files

ec9f891979438627e4873e13de93969d6a7b0fbcc1022c9a9958f03ca9c7a444
.exe windows x86

d2c08e1ba76f73811f47ae68be0904e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
GetVersionExA
VirtualProtect
UnhandledExceptionFilter
WriteConsoleOutputW
VirtualFree
HeapSize
MultiByteToWideChar
GetDateFormatA
RaiseException
GlobalLock
CreateFileMappingW
GetBinaryTypeA
SetTapeParameters
SetProcessWorkingSetSize
EnumSystemCodePagesW
DebugBreak

user32

OpenWindowStationA
CreateWindowStationW
MsgWaitForMultipleObjects
EnumDisplayDevicesW
GetScrollInfo
GetMenu
EnumWindows
SetClassLongW
SendMessageTimeoutW
DefWindowProcA

gdi32

GetCharWidthW
GetBkColor
ScaleWindowExtEx
SetViewportExtEx
GetRgnBox
CreatePolygonRgn
SetPixel
ChoosePixelFormat
FillRgn
GetPixel
LPtoDP
GetFontData
SetWorldTransform
CreateHalftonePalette
SelectClipRgn
GetCurrentObject

comdlg32

PageSetupDlgA
FindTextA
ChooseColorA

advapi32

CryptSetHashParam

shell32

SHGetFileInfoW
ExtractAssociatedIconW

ole32

StgSetTimes
OleSave
CoRegisterClassObject
OleIsRunning
CLSIDFromString

oleaut32

SafeArrayCreateVector
SafeArrayGetUBound
SetErrorInfo
LoadTypeLi
SysReAllocStringLen
DispGetIDsOfNames
QueryPathOfRegTypeLi
SafeArrayGetElement

comctl32

ImageList_Create
ImageList_GetImageCount

shlwapi

SHDeleteKeyA
PathGetArgsW
PathIsUNCW
SHGetValueA
PathRemoveBlanksW
SHSetValueA
PathAppendA
PathRemoveFileSpecW
PathIsURLW
PathIsRootW
StrCmpNW
PathIsUNCA
SHDeleteValueW
SHRegQueryUSValueW

setupapi

SetupDiClassNameFromGuidExA
SetupDiGetDeviceRegistryPropertyW

msvcrt

_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_controlfp
exit
_XcptFilter
strlen
__p__fmode
__set_app_type
_exit
_except_handler3
__p__commode

Sections

.text
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d2c08e1ba76f73811f47ae68be0904e7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

setupapi

msvcrt

Sections

.text Size: 272KB - Virtual size: 270KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 16KB - Virtual size: 12KB

.text
Size: 272KB - Virtual size: 270KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 16KB - Virtual size: 12KB