6eff7fa9e649ac0a7d9579054e98cc9285721dedf94d73359b2864649c7f2073

Sharing

Copy URL Twitter E-mail

General

Target

6eff7fa9e649ac0a7d9579054e98cc9285721dedf94d73359b2864649c7f2073
Size

1.4MB
MD5

f03ffa15116f2f371418d1424177f0a8
SHA1

dd7cc8dfe1092d6be04a44028246a8d1aff4735c
SHA256

6eff7fa9e649ac0a7d9579054e98cc9285721dedf94d73359b2864649c7f2073
SHA512

bd1701b3ff3ebbf720d065398db5e960d715e4b90fca843ec1715e0ef3fcaaa9bb58a50e962046bbf643ad99e502197d885c817ff04f3a7588292a8f3f0a6db3
SSDEEP

24576:E3SROfvuehBhnCjouXuqlxG+5Xuecn8j4m2F6EZJ+Ae19esnhv8auK:EvWIVC8uXJA+5XH73dEricsnhE

Score

1^/10

Malware Config

Signatures

Files

6eff7fa9e649ac0a7d9579054e98cc9285721dedf94d73359b2864649c7f2073
.exe windows x86

f7f96c065a597c26c86aa7836f54159d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory
GetCurrentThreadId
LoadLibraryA
CreateFileW
WriteFile
CloseHandle
CreatePipe
CreateProcessA
PeekNamedPipe
ReadFile
GetExitCodeProcess
GetEnvironmentVariableA
CreateWaitableTimerA
SetWaitableTimer
LocalSize
CreateIoCompletionPort
GetQueuedCompletionStatus
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
FreeLibrary
GetProcAddress
LCMapStringA
GetModuleHandleW
Sleep
MultiByteToWideChar

user32

GetParent
GetAncestor
GetClassNameA
GetInputState
WaitForInputIdle
MsgWaitForMultipleObjects
DefWindowProcW
wsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
EndPaint
MessageBoxA
FillRect
GetSysColor
BringWindowToTop
BeginPaint
GetWindowThreadProcessId
SetFocus
CreateWindowExW
LoadCursorW
SetForegroundWindow
AttachThreadInput
IsZoomed
IsIconic
ShowWindow
SetWindowLongW
GetWindowLongW
DestroyIcon
CreateIconFromResource
RegisterClassExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoCreateGuid

gdi32

DeleteObject
CreateSolidBrush

imagehlp

MakeSureDirectoryPathExists

msvcrt

??3@YAXPAX@Z
realloc
modf
strchr
malloc
free
_ftol
atoi
sprintf
strncmp
__CxxFrameHandler
memmove

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f7f96c065a597c26c86aa7836f54159d

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

gdi32

imagehlp

msvcrt

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 34KB - Virtual size: 33KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 34KB - Virtual size: 33KB