2e4d4734324163cfd1466d0de6afb590a6af1bdd02044509b41748fccfc88443

Sharing

Copy URL Twitter E-mail

General

Target

2e4d4734324163cfd1466d0de6afb590a6af1bdd02044509b41748fccfc88443
Size

83KB
MD5

75f2fa5cb762fbb955e88826b65f3159
SHA1

27a27662ca308356b976621404219dc6ed627d5e
SHA256

2e4d4734324163cfd1466d0de6afb590a6af1bdd02044509b41748fccfc88443
SHA512

1d438263673f06de965e1655d22f4b04e324f6402bfd95f0d4834ea572b526aa260b8872f1ef595656e16b698f0e893594359c24062e7c3a5d40723cfa0705d7
SSDEEP

1536:doYy68QR4R9smYRF5d+LTdnln2lmvbEmr1FIQOJ7aT+XNsWoPVcdZiMNu:Q6l6jsl5d0ln2lmvbEmfIQbT+4sZ3Nu

Score

N/A

Malware Config

Signatures

Files

2e4d4734324163cfd1466d0de6afb590a6af1bdd02044509b41748fccfc88443
.exe windows x86

180de8a6ff6f84f8518d48abff4e97d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateStatusWindowW
ord17

shlwapi

PathIsPrefixW
UrlEscapeA
PathIsContentTypeW
UrlApplySchemeA
UrlCombineA

kernel32

GetNumberFormatW
GetCommandLineW
GetLastError
WaitForSingleObject
Sleep
GetCurrentProcess
ExitProcess
GetExitCodeProcess
CreateProcessW
GetTickCount
VirtualAlloc
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
IsWow64Process
GetModuleHandleW
GetProcessHeap
LCMapStringW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
EnumResourceTypesA
FindFirstFileExW
SetErrorMode
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetStdHandle
ReadFile
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
RtlUnwind
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
CreateFileW
CloseHandle
GetCompressedFileSizeW
FindClose
FlushFileBuffers
GetConsoleCP
HeapSize
SetEndOfFile
DecodePointer
SleepEx
FindNextFileW

mswsock

SetServiceW
TransmitFile
NPLoadNameSpaces
EnumProtocolsA
GetServiceA
MigrateWinsockConfiguration

winspool.drv

EnumPrinterDriversA
AdvancedDocumentPropertiesA
DevQueryPrintEx
EnumFormsW
OpenPrinterW
ord203

wsock32

ioctlsocket
getpeername
__WSAFDIsSet

rtm

RtmAddRoute
RtmEnumerateGetNextRoute
MgmInitialize
RtmBlockDeleteRoutes
MgmGetFirstMfe
RtmIsRoute
MgmGetMfe

urlmon

URLDownloadToFileA
FindMimeFromData
URLOpenPullStreamA
RevokeBindStatusCallback
CreateAsyncBindCtx

user32

TranslateAcceleratorW
LoadAcceleratorsW
RegisterClipboardFormatW
GetSystemMetrics
CreateWindowExW
RegisterClassExW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadStringW
LoadMenuW
DestroyMenu
CheckMenuItem
GetSubMenu
UpdateWindow
ShowWindow
GetParent
LoadCursorW
LoadIconW
LoadImageW

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

180de8a6ff6f84f8518d48abff4e97d7

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

kernel32

mswsock

winspool.drv

wsock32

rtm

urlmon

user32

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 3KB - Virtual size: 5KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 3KB - Virtual size: 5KB