ee5f58c8fafcb5e1f8293e042f07f0030acdf56f841341503f26aba3f70c978b

General

Target

ee5f58c8fafcb5e1f8293e042f07f0030acdf56f841341503f26aba3f70c978b
Size

556KB
MD5

de1f7052bdc6cb8cc6cef6c6ebd9d6be
SHA1

cc0cbd7f22d710e5cbdbf1160eb0148a3154e24d
SHA256

ee5f58c8fafcb5e1f8293e042f07f0030acdf56f841341503f26aba3f70c978b
SHA512

9ec39eb3950921c7dea09d4d6c57ee1cc4a5885581f38faf5697fb04f6cfc945f2058d800c249f6b840c82a383d925e225fd17449df4a324fc19828d99da8c29
SSDEEP

12288:Q6ms6n442eMLnTIFpUldzaKRVlrGaOQpmdQ5HHzyymMrcHVhnM:QfDJ2epFYdzXEqmm5HHz12M

Score

N/A

Malware Config

Signatures

Files

ee5f58c8fafcb5e1f8293e042f07f0030acdf56f841341503f26aba3f70c978b
.exe windows x86

a26a70557ff703229ec8cc822a9ae665

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerLanguageNameA
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
RaiseException
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

version

VerQueryValueA
VerFindFileA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerInstallFileA

wsnmp32

ord603
ord901
ord102

msrating

RatingEnable

Exports

Exports

exp_func

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 489KB - Virtual size: 794KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a26a70557ff703229ec8cc822a9ae665

Headers

File Characteristics

Imports

kernel32

version

wsnmp32

msrating

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 489KB - Virtual size: 794KB

.rsrc Size: 34KB - Virtual size: 33KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 489KB - Virtual size: 794KB

.rsrc
Size: 34KB - Virtual size: 33KB