e5284583b9d826adf9888c39b065c5992c8237daecb71f383026cc8eb874790e

Sharing

Copy URL Twitter E-mail

General

Target

e5284583b9d826adf9888c39b065c5992c8237daecb71f383026cc8eb874790e
Size

61KB
MD5

ad9d87839129b5e0605029351f75e668
SHA1

09ecf242723e0d4665df48c5a127d145616c3321
SHA256

e5284583b9d826adf9888c39b065c5992c8237daecb71f383026cc8eb874790e
SHA512

5b8d8f66cdbf154bae621bc82c1db39affacfc8a5ea419fb0730d984d209fdb2d05685eae7ca7d70eab136be3c7ba75e4050c75c2f9022958c74193a53bc73a3
SSDEEP

768:nAzrgeVIxuEDamy+WsUQVLSNiVdXXQOQy6LIBTMz4tl4+se5WEX5K9CD:nAzrg5am1NVL2iVdHQOhizShR5K9

Score

N/A

Malware Config

Signatures

Files

e5284583b9d826adf9888c39b065c5992c8237daecb71f383026cc8eb874790e
.exe windows x86

79256057b91513dc7e33353b98510b3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContextEx
ImmDisableIME
ImmShowSoftKeyboard
ImmGetCompositionFontA

kernel32

WideCharToMultiByte
MultiByteToWideChar
IsWow64Process
GetCurrentProcess
VirtualAlloc
Sleep
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
lstrcatW
lstrcpyW
lstrlenW
CreateDirectoryW
GetTempFileNameW
GetTempPathW
ExitProcess
Wow64RevertWow64FsRedirection
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetCommandLineW
Wow64DisableWow64FsRedirection
GetSystemDirectoryW
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
CreateFileW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapAlloc
GetLastError
HeapFree
GetStartupInfoW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
ReadFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
RtlUnwind
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle

loadperf

LoadPerfCounterTextStringsA

wininet

SetUrlCacheEntryGroup
HttpEndRequestW

rtm

RtmBlockSetRouteEnable
MgmRegisterMProtocol

ole32

HACCEL_UserSize
OleLoad
CoInstall
CoInitialize
SNB_UserFree

winmm

joyGetThreshold
mmioWrite
midiStreamPause
mmioRenameA
midiInGetNumDevs

urlmon

WriteHitLogging
CoInternetCreateZoneManager

msacm32

acmFormatChooseW
acmStreamClose
acmFormatEnumA
acmFormatTagEnumA
acmDriverAddA

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79256057b91513dc7e33353b98510b3e

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

loadperf

wininet

rtm

ole32

winmm

urlmon

msacm32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 3KB