ef2c687da28a08d40b34e1c30c077800a44510f81060fba128a2a1c80c9c5256

General

Target

ef2c687da28a08d40b34e1c30c077800a44510f81060fba128a2a1c80c9c5256
Size

184KB
MD5

61b25fc6f5c7f2d3fa9015a6005714f2
SHA1

80caae5a49db7415c270cb5cccaba31e51622187
SHA256

ef2c687da28a08d40b34e1c30c077800a44510f81060fba128a2a1c80c9c5256
SHA512

90ca4c8d00d7d3e2f9d470d732fb8b2144992d8cdbf7b9e75daaa8ae9b057b6c76ce4a31ecadbecca0293c0eb158d304343a3e0a15944cd042ddbc46c3631587
SSDEEP

3072:eMdVus4OCJ54cKT3m4btsSSTa7KbyLvi7o8B:eKQs4OG+cKT3m4HSTaOu2c

Score

N/A

Malware Config

Signatures

Files

ef2c687da28a08d40b34e1c30c077800a44510f81060fba128a2a1c80c9c5256
.exe windows x86

0d84007b8eab16f8cbd5ae4152a2217d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
GetLastError
lstrlenA
CopyFileA
Sleep
ExitProcess
GetShortPathNameA
GetVersionExA
DeleteFileA
GetTempPathA
GetSystemTime
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetModuleFileNameA
LCMapStringW
LCMapStringA
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
HeapValidate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyA

shlwapi

SHDeleteKeyA

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d84007b8eab16f8cbd5ae4152a2217d

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 19KB

.vmp0 Size: 28KB - Virtual size: 24KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 19KB

.vmp0
Size: 28KB - Virtual size: 24KB