e7ee6a7b1f62cd9d437478814981c2a19bc216c2390084be6e8ad3a5304579e2

Sharing

Copy URL

Twitter E-mail

General

Target

e7ee6a7b1f62cd9d437478814981c2a19bc216c2390084be6e8ad3a5304579e2
Size

236KB
MD5

34e4d74c79e5937daf2afba5ea90d58e
SHA1

8e13b42579b54d08eca43c09b167ee4e5b28a65d
SHA256

e7ee6a7b1f62cd9d437478814981c2a19bc216c2390084be6e8ad3a5304579e2
SHA512

77dd1740416b8bf667f1721c523aad079a2eb023875927dbac29803da4a8a73c2086a53fdcf4f7b89655ca924972738ce090b8449d8a6aa274edc113c6c031ab
SSDEEP

3072:kzz15frLyxwqnRuWybssHorXGvpXs5h2qmqIWvVv27hZY:kffrLewqiwsH2XGxRU9aZY

Score

N/A

Malware Config

Signatures

Files

e7ee6a7b1f62cd9d437478814981c2a19bc216c2390084be6e8ad3a5304579e2
.exe windows x86

5d04c6754ce420bf7a99010233a12b74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryExW
ReadConsoleInputA
GetTempPathW
GetSystemDirectoryW
RemoveDirectoryA
OutputDebugStringW
GetProcAddress
LocalAlloc
MoveFileWithProgressA
SearchPathW
VerifyVersionInfoW
CopyFileExW
GetThreadLocale
FindNextFileA
FindFirstVolumeW
LocalShrink
LocalFlags
GetModuleHandleW
FindResourceA
SetFileTime
InterlockedDecrement
RemoveVectoredExceptionHandler
lstrcatA
CreateActCtxW
UpdateResourceW
CopyFileW
FindFirstFileW
FreeEnvironmentStringsW
EnumResourceLanguagesA
InterlockedIncrement
SetFileApisToOEM
GlobalGetAtomNameW
AddConsoleAliasA
GetConsoleAliasW
ExitThread
LoadLibraryA
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CloseHandle
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CreateFileA

user32

CharUpperBuffW

gdi32

SetBrushOrgEx

advapi32

AccessCheckByTypeResultList

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d04c6754ce420bf7a99010233a12b74

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 72KB - Virtual size: 71KB

.data Size: 76KB - Virtual size: 184KB

.rsrc Size: 87KB - Virtual size: 86KB

.text
Size: 72KB - Virtual size: 71KB

.data
Size: 76KB - Virtual size: 184KB

.rsrc
Size: 87KB - Virtual size: 86KB