92b7ec5b49a14c3db61de31ce0499b9e0abf086398faa58ae258c48566119c14

Sharing

Copy URL Twitter E-mail

General

Target

92b7ec5b49a14c3db61de31ce0499b9e0abf086398faa58ae258c48566119c14
Size

53KB
MD5

eedbc15d8a0a83d2ddcb8ad0f11a15d9
SHA1

8dce740828b5304b2330c0f542f934ea7996aa0c
SHA256

92b7ec5b49a14c3db61de31ce0499b9e0abf086398faa58ae258c48566119c14
SHA512

3213486a386699e880261609450022c203bd74e13261cf22c1519964e2c1363091620ab95744f4c2dd1209e84f3594e3aae57bd3b27be54498514f5d75cf5b9d
SSDEEP

768:H0f4KOA/euPU7XCIzpkZHQCjP7snwwCcZ3CBzUi0JcZwCkC5HVYPCQy:H0Q/EMCIzaQeQnEe+0JcjHyPM

Score

N/A

Malware Config

Signatures

Files

92b7ec5b49a14c3db61de31ce0499b9e0abf086398faa58ae258c48566119c14
.exe windows x86

ef33879c39091d5d0cfb8ed69732039a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobObjectW
CreateJobObjectA
CreateIoCompletionPort
CreateHardLinkW
CreateHardLinkA
CreateFileW
CreateFileMappingW
EnumResourceTypesA
CreateFileA
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
GetModuleHandleA
EnumResourceTypesW
FindVolumeMountPointClose
EnumSystemCodePagesA
EnumSystemCodePagesW
EnumSystemLanguageGroupsA
EnumSystemLanguageGroupsW
EnumSystemLocalesA
EnumSystemLocalesW
EnumTimeFormatsA
EnumTimeFormatsW
EnumUILanguagesA
EnumUILanguagesW
EraseTape
FindFirstVolumeA
FindFirstVolumeMountPointA
FindFirstVolumeMountPointW
FindFirstVolumeW
FindNextChangeNotification
FindNextFileA
FindNextFileW
FindNextVolumeA
FindNextVolumeMountPointA
FindNextVolumeMountPointW
FindNextVolumeW
FindResourceA
FindResourceExA
FindResourceExW
FindResourceW
FindVolumeClose
CreateFileMappingA

gdi32

CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
CreateFontIndirectExA
CreateFontIndirectExW
CreateFontIndirectW
CreateFontW
CreateHalftonePalette
CreateHatchBrush
CreateICA
CreateICW
CreateMetaFileA
CreateMetaFileW
CreatePalette
CreatePatternBrush
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateScalableFontResourceW
CreateScalableFontResourceA

advapi32

RegOpenKeyA
RegOpenKeyW

shell32

SHGetPathFromIDListA
ord180
ord179
SHGetMalloc
SHGetInstanceExplorer
SHGetIconOverlayIndexW
SHGetIconOverlayIndexA
SHGetFolderPathW
SHGetFolderPathA
SHGetFolderLocation
SHGetFileInfoW
SHGetFileInfoA
SHGetDiskFreeSpaceExW
SHGetDiskFreeSpaceExA
SHGetDesktopFolder
SHGetDataFromIDListW

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef33879c39091d5d0cfb8ed69732039a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

shell32

Sections

.text Size: 45KB - Virtual size: 44KB

.data Size: 512B - Virtual size: 612B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1024B - Virtual size: 756B

.text
Size: 45KB - Virtual size: 44KB

.data
Size: 512B - Virtual size: 612B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1024B - Virtual size: 756B