eba11cd1b0b931a61b2a8c41e17196e09e1c5839a15611241cc050cb25a26e6e

Sharing

Copy URL Twitter E-mail

General

Target

eba11cd1b0b931a61b2a8c41e17196e09e1c5839a15611241cc050cb25a26e6e
Size

568KB
MD5

b43979f12f1aeb115de6f4e771e2f964
SHA1

df1a83dbfde020d4391bc6cc9f6f628aa84d19b1
SHA256

eba11cd1b0b931a61b2a8c41e17196e09e1c5839a15611241cc050cb25a26e6e
SHA512

3adfebd73a95220bfa328aaab090badb3fc22b5108c0537aa2f61033c0859e6aa78a5334da7c8f73a4595df3173de893924d21b2b786a4c537e7d2ca2fdd9ad2
SSDEEP

12288:aNpwj91xLeUU4Tz9Vkvh1+w0osj/VCjn/l+lxsjXAfXXbIYDf:CGpaUUeBVkvh1+Fj/+n0lxsjwPbIg

Score

N/A

Malware Config

Signatures

Files

eba11cd1b0b931a61b2a8c41e17196e09e1c5839a15611241cc050cb25a26e6e
.exe windows x86

221c667dd75e6681433e53b667c12a5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetSysColors
EndDialog
ShowOwnedPopups
GetWindow
ArrangeIconicWindows
DeferWindowPos
GetLastActivePopup
FindWindowExA
CreateDialogIndirectParamA
IsIconic

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
CloseHandle
CreateFileA
SetStdHandle
SetFilePointer
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
SetEndOfFile
ReadFile
GetStringTypeA
GetStringTypeW
RaiseException
LCMapStringA
LCMapStringW

activeds

ord21
ord18
ord5
ord22
ord4
ord14
ord19
ord7
ord13

setupapi

SetupInstallFileExA
SetupDiGetHwProfileList
SetupGetIntField
SetupQueueDefaultCopyW
SetupCopyOEMInfA
SetupFreeSourceListA
SetupQueueCopySectionA
SetupSetDirectoryIdExW
SetupDeleteErrorA
SetupDiInstallClassExW
SetupRemoveFileLogEntryW
SetupDiAskForOEMDisk
SetupQueueRenameW
SetupAddToDiskSpaceListW
SetupCloseLog

msrating

RatingObtainQuery

Exports

Exports

exp_func

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 489KB - Virtual size: 798KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

221c667dd75e6681433e53b667c12a5f

Headers

File Characteristics

Imports

user32

kernel32

activeds

setupapi

msrating

Exports

Exports

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 489KB - Virtual size: 798KB

.rsrc Size: 35KB - Virtual size: 34KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 489KB - Virtual size: 798KB

.rsrc
Size: 35KB - Virtual size: 34KB