9ea4f65ae0e11cd5e0dea9724f23a2870ab7e371dce1605c89839fe908771ef8

Sharing

Copy URL

Twitter E-mail

General

Target

9ea4f65ae0e11cd5e0dea9724f23a2870ab7e371dce1605c89839fe908771ef8
Size

82KB
MD5

00924b82c269e8defb17cc6c5b54ddc0
SHA1

46772175ba77aa65bd50120850f7d9325bb0ce63
SHA256

9ea4f65ae0e11cd5e0dea9724f23a2870ab7e371dce1605c89839fe908771ef8
SHA512

17078d0d36d8c99780b9fc6d35e11f1b1dc954a5fd56441870ec799beeeaf2c31f96cc6e69db7e5334c20d40d1fd460d5c24f7c624191f31b218ab29dd40b889
SSDEEP

1536:+fLaSbb5i77TdKw+kR4oinsxst+upsufbbBEYV/2O:cLaSbb5iBBD6oinftpsuf3Bz+O

Score

N/A

Malware Config

Signatures

Files

9ea4f65ae0e11cd5e0dea9724f23a2870ab7e371dce1605c89839fe908771ef8
.exe windows x86

439279626738b3bbea95206fe1293104

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

ord9
ord8
ord6
ord5
ord12
ord2
ord11
ord7
ord10
ord4

shlwapi

SHGetValueA
PathSearchAndQualifyW
SHRegQueryInfoUSKeyW
StrFormatByteSizeA

kernel32

GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
GetExitCodeThread
GetACP
SetEvent
GetLastError
GetCurrentProcessId
GetModuleFileNameA
OpenMutexA
LocalLock
GetCurrentThreadId
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetFileType
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
SetFilePointer
GetCPInfo
GetOEMCP
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

netapi32

NetGroupAddUser
NetGroupAdd
NetGetDCName
NetFileGetInfo
NetConfigGet

uxtheme

GetThemeBackgroundRegion

wsnmp32

ord400

aclui

ord1
ord2

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

439279626738b3bbea95206fe1293104

Headers

File Characteristics

Imports

oledlg

shlwapi

kernel32

netapi32

uxtheme

wsnmp32

aclui

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 7KB

.rsrc Size: 44KB - Virtual size: 43KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 7KB

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 2KB - Virtual size: 2KB