b7f3b8c8e8cd3b886baea02961ce6968315359a78e4af1edc51f930ae4ebd67b

Sharing

Copy URL

Twitter E-mail

General

Target

b7f3b8c8e8cd3b886baea02961ce6968315359a78e4af1edc51f930ae4ebd67b
Size

420KB
MD5

e7aba23375f3a435c774684db72f15d8
SHA1

8b20384f4a28f897a82bb4cb58e317d100096b73
SHA256

b7f3b8c8e8cd3b886baea02961ce6968315359a78e4af1edc51f930ae4ebd67b
SHA512

2ac781bd7b16afa5393849928c5f0ac7df120f42cc6a24aecc7f3e8cd746733a3c8d781d4cc7e460d986b368305940a7b28aecad8fc7949ab65438d0fce1dec9
SSDEEP

6144:pGjz2fKsolgj9OHcBF063px35NabPWVR4Md24kGZ9VQnP5apXP9Zr:ptysolOO8z063X5NabPcT24jZq4XV

Score

N/A

Malware Config

Signatures

Files

b7f3b8c8e8cd3b886baea02961ce6968315359a78e4af1edc51f930ae4ebd67b
.dll windows x86

4552138ce75aabc91ad0a7628bc4e220

Code Sign

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CloseHandle
VirtualProtect
LoadLibraryA
ResetEvent
VirtualAlloc
GetStartupInfoA
CreateDirectoryA
GetEnvironmentVariableA
CreateProcessA
CreateSemaphoreA
Sleep
VirtualFree
GetTickCount
GetCurrentProcess
GetLastError
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
CreateFileA
SetHandleCount
GetStdHandle
DeleteCriticalSection
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
MultiByteToWideChar
ReadFile
InitializeCriticalSection
HeapSize
GetCPInfo
GetACP
GetOEMCP
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

wintrust

WinVerifyTrust

clusapi

SetClusterGroupNodeList
SetClusterNetworkName
SetClusterNetworkPriorityOrder
RemoveClusterResourceDependency
SetClusterGroupName
SetClusterResourceName
SetClusterQuorumResource
PauseClusterNode
RemoveClusterResourceNode
OpenClusterNode
RestoreClusterDatabase
RegisterClusterNotify
ResumeClusterNode
OpenClusterResource
OpenClusterNetwork
SetClusterName
OpenClusterNetInterface

Sections

.text
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4552138ce75aabc91ad0a7628bc4e220

Code Sign

Headers

File Characteristics

Imports

kernel32

wintrust

clusapi

Sections

.text Size: 272KB - Virtual size: 270KB

.rdata Size: 64KB - Virtual size: 60KB

.data Size: 68KB - Virtual size: 192KB

.rsrc Size: 4KB - Virtual size: 796B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 272KB - Virtual size: 270KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 68KB - Virtual size: 192KB

.rsrc
Size: 4KB - Virtual size: 796B

.reloc
Size: 8KB - Virtual size: 7KB