ef53775e31052887ac0be79e9ce3480ae78d9479e5d4b0771ddb9c27bc2c5795

General

Target

ef53775e31052887ac0be79e9ce3480ae78d9479e5d4b0771ddb9c27bc2c5795
Size

20KB
MD5

4fcdb7fe8530a772da6cee67cdb8d652
SHA1

0db5cc8e99aba37270cd4999919d5661b9128fda
SHA256

ef53775e31052887ac0be79e9ce3480ae78d9479e5d4b0771ddb9c27bc2c5795
SHA512

54b78a125f7720146b1fff5f1fb59dda245f122a790a2383ad4c2d54826922e1ae250d51091396846c78993021c9b39ae3eef19046f2060e78677350e497304d
SSDEEP

96:El8AoIB8hPuE71l4jIBqjW4OxufS8WN9Wujg2MNYADUIjTT8oZ/+8pojlEzLn1u:QNoEkLSjFyxV79Wuc2+8UT3hdpojlUu

Score

N/A

Malware Config

Signatures

Files

ef53775e31052887ac0be79e9ce3480ae78d9479e5d4b0771ddb9c27bc2c5795
.exe windows x86

eb4cc7580e64a2a5e1c5769cef55f674

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
FreeLibrary
Sleep
GetProcAddress
LoadLibraryA
CloseHandle
TerminateProcess
CreateProcessA
WaitForSingleObject
WinExec
GetModuleFileNameA
GetTempPathA
GetStartupInfoA
GetModuleHandleA

user32

EnumWindows
GetWindowThreadProcessId
EnumChildWindows
PostMessageA
TranslateMessage
DispatchMessageA
SendMessageTimeoutA
RegisterWindowMessageA
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
RegisterClassExA
GetClassNameA
DefWindowProcA
GetMessageA

shell32

SHGetSpecialFolderPathA

ole32

CoUninitialize
CoInitialize

oleaut32

SysFreeString
VariantClear

msvcrtd

_strlwr
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
sprintf
fopen
fwrite
fclose
__CxxFrameHandler
_stricmp
srand
time
wcslen
atoi
strchr
strstr
printf
_CrtDbgReport
rand

shlwapi

SHGetValueA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eb4cc7580e64a2a5e1c5769cef55f674

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

msvcrtd

shlwapi

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 488B

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 488B