e27ef3622357b082b076ac8326f6502f40690a8546f6ad820afc88e0bbd94f9d

General

Target

e27ef3622357b082b076ac8326f6502f40690a8546f6ad820afc88e0bbd94f9d
Size

53KB
MD5

8a59caa224d5c73cd406ae3398635600
SHA1

efe8dd8fbc9d3be0246cb57f69eadffa32a84c5a
SHA256

e27ef3622357b082b076ac8326f6502f40690a8546f6ad820afc88e0bbd94f9d
SHA512

b79dba83f3534e0e328f61515a6049dff7f0dcf9efcfeb2bbc74c6e86d03dc82a024b8500d06aa44149cf8a480aaced05b14a86c966875c2b45736b896e72f66
SSDEEP

1536:aXqTFsIltcfvahupjbZS9pOmnCmFgNEn+AdKdthqFt:yvUaouFuEmCmFQE+AAthqFt

Score

N/A

Malware Config

Signatures

Files

e27ef3622357b082b076ac8326f6502f40690a8546f6ad820afc88e0bbd94f9d
.exe windows x86

7eb407c67a1599d1252f5304afe534d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcpy
memmove
_waccess
_wfopen
wcscpy
wcsrchr
strcspn
sprintf
_itow
fclose
_snprintf
_beginthreadex
_vsnwprintf
_snwprintf
malloc
_strlwr
fopen
wcsncmp
free
_exit
wcsncat
_acmdln

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetCurrentThreadId
WriteConsoleInputVDMA
GetEnvironmentVariableW
GetQueuedCompletionStatus
GetConsoleCursorMode
FindNextFileA
VirtualUnlock
SetVolumeMountPointA
GetVersionExA
InvalidateConsoleDIBits
OutputDebugStringW
OpenProcess
FreeLibrary
QueueUserWorkItem
SetConsoleFont
LCMapStringW
GetCommState
SetTapePosition
CallNamedPipeW
lstrcpynA
GetStringTypeExW

ntdll

NtQueryDirectoryFile
RtlExtendedIntegerMultiply
atan
RtlNewInstanceSecurityObject
RtlGetElementGenericTable
fabs
ZwAcceptConnectPort
ZwSetInformationProcess
NtCompleteConnectPort
ZwSetDefaultLocale
ZwUnmapViewOfSection
RtlAddAtomToAtomTable
RtlSetAllBits
NtPowerInformation
ZwOpenJobObject
RtlFormatCurrentUserKeyPath
NtAccessCheckAndAuditAlarm
RtlSetEnvironmentVariable
RtlCreateUnicodeStringFromAsciiz
DbgPrompt
RtlCreateUserProcess

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7eb407c67a1599d1252f5304afe534d5

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

ntdll

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 2KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 2KB