efa91be35051b78e75e9883e19d38936005403763b843e92ce26d13b14ce3632

General

Target

efa91be35051b78e75e9883e19d38936005403763b843e92ce26d13b14ce3632
Size

108KB
MD5

ed28070f36f8dfb490652bd5dd7b03b7
SHA1

635c5eb36914cf05cc39770ec6a78ad280d22959
SHA256

efa91be35051b78e75e9883e19d38936005403763b843e92ce26d13b14ce3632
SHA512

3f70168cb17672a3dcd2b892d5a7035ccbb79c382f0bb97cd928b9960a1e609fd951ece967aa5d580f19297ff89c682ff0685d37236e9d7af8fcd76b3191d154
SSDEEP

1536:1c2FOOUDGq8W67wC+eollin1r7PB+F/6kHPjL0CLHjJAvpf56Iv:17QDgWAwC+e+li1nPC/lEMjiBf56Iv

Score

N/A

Malware Config

Signatures

Files

efa91be35051b78e75e9883e19d38936005403763b843e92ce26d13b14ce3632
.exe windows x86

e5f3861f9de6142542a3d48cf27d345a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
Sleep
CreateThread
CloseHandle
GetStartupInfoA
CreatePipe
MultiByteToWideChar
TerminateProcess
WriteFile
WritePrivateProfileStringA
GetPrivateProfileStringA
GetLastError
WideCharToMultiByte
GetModuleFileNameA
ReadFile
GetShortPathNameA
LoadLibraryA
CreateFileW
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
RaiseException
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
HeapSize
SetFilePointer
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetEndOfFile

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA

wininet

InternetOpenW
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
HttpEndRequestA
InternetWriteFile
HttpSendRequestExW
InternetSetCookieW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetCrackUrlW
InternetSetOptionW

ws2_32

WSAStartup
gethostname

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e5f3861f9de6142542a3d48cf27d345a

Headers

File Characteristics

Imports

kernel32

advapi32

wininet

ws2_32

Sections

.text Size: 84KB - Virtual size: 83KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 11KB

.text
Size: 84KB - Virtual size: 83KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 11KB