ef319c243e1fe572be6730ef847daa84a752a407a9fb89d36ee2f69b9afa3a2b

General

Target

ef319c243e1fe572be6730ef847daa84a752a407a9fb89d36ee2f69b9afa3a2b
Size

512KB
MD5

b747faafc64b0ba674c84dcca6fc7938
SHA1

72b40bee6ab95670f6b2db85cb1ff763a0afd818
SHA256

ef319c243e1fe572be6730ef847daa84a752a407a9fb89d36ee2f69b9afa3a2b
SHA512

e82d7f69c725229f1d4c9468d0d9fc366144c1b8d2f35dd1bfb0cdec9d634e6fbf8bafaf1d60017f8c360683eaa8cbe7f6a958b560e9bf2497bbd196a2562ff3
SSDEEP

12288:Anfmz39dIL9oyA0AyM+pfOR1rKS/v7MYNbVKYdP0WmHd:AfI39dq9oyD5ORRhgebVKo0Ld

Score

N/A

Malware Config

Signatures

Files

ef319c243e1fe572be6730ef847daa84a752a407a9fb89d36ee2f69b9afa3a2b
.exe windows x86

2c8a839ac95a0a95769684b728fbc306

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetTempPathA
SetFileAttributesA
CreateDirectoryA
GetFileAttributesA
LockResource
LoadResource
SizeofResource
FindResourceA
CloseHandle
CreateProcessA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
LoadLibraryA
GetShortPathNameA
GetModuleFileNameA
SetLastError
lstrcmpA
GetModuleHandleA
GetVersionExA
VirtualProtect
GetLocaleInfoA
HeapSize
ReadFile
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
CreateFileA
SetFilePointer
GetProcAddress
GetCurrentProcessId
FreeLibrary
Sleep
GetEnvironmentVariableA
MoveFileExA
ExitProcess
HeapFree
HeapAlloc
DeleteFileA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
TerminateProcess
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
FlushFileBuffers
GetSystemInfo

user32

GetMessageA
DispatchMessageA
CreateWindowExA
RegisterClassExA
FindWindowA
IsIconic
ShowWindow
SetForegroundWindow
PostMessageA
DefWindowProcA
PostQuitMessage

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c8a839ac95a0a95769684b728fbc306

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 466KB - Virtual size: 466KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 466KB - Virtual size: 466KB