32e8d3ecf30252e7c893d3c760eaf41b4e0a1c43d507e68e87769deed0bcb798

Sharing

Copy URL Twitter E-mail

General

Target

32e8d3ecf30252e7c893d3c760eaf41b4e0a1c43d507e68e87769deed0bcb798
Size

2.0MB
MD5

0661eecd1c11976e231920c51b77b950
SHA1

f7eb0117f7ea6e8cc46728662f9284dc73ec7b35
SHA256

32e8d3ecf30252e7c893d3c760eaf41b4e0a1c43d507e68e87769deed0bcb798
SHA512

533763cc6fbd0ced2c6788dbc012f3004e87b0805cc1ab72d04b2bca85f6f75fd36b4295d4a36c233ce62d8c9ea12da25f444f8454e739c68ed2d8fb45281573
SSDEEP

49152:wPqLH7TW9u9uz+jFJqkQrMbTdNqw2we6t8xavt18:eAbpxJWgTdN32Nxavs

Score

N/A

Malware Config

Signatures

Files

32e8d3ecf30252e7c893d3c760eaf41b4e0a1c43d507e68e87769deed0bcb798
.exe windows x86

0727f5da12cd50ba3a482141c94c576a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACloseEvent
WSAConnect
WSAAddressToStringA
WSACreateEvent
WSAWaitForMultipleEvents
WSAEnumNetworkEvents

userenv

EnterCriticalPolicySection
UnloadUserProfile
DeleteProfileA
CreateEnvironmentBlock
DestroyEnvironmentBlock

winmm

waveInClose
timeBeginPeriod
timeEndPeriod
waveInAddBuffer
waveInOpen
waveInStop
waveInStart

mpr

WNetAddConnection2A
WNetGetUniversalNameA
WNetGetUserA

netapi32

NetWkstaGetInfo
NetApiBufferFree
NetGetAnyDCName

comdlg32

GetFileTitleA
ChooseFontA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

comctl32

ImageList_Remove
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_Write
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Destroy

kernel32

GetACP
GetCPInfo
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetOEMCP
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
GetCurrentProcess
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
SetSystemPowerState
GetProcessHeap
GetLocalTime
CreateFileA
WriteConsoleW
VirtualProtect
GetEnvironmentVariableA
lstrcmpiA
ExitProcess
TerminateProcess

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 548KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0727f5da12cd50ba3a482141c94c576a

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

userenv

winmm

mpr

netapi32

comdlg32

comctl32

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 236KB - Virtual size: 236KB

.data Size: 548KB - Virtual size: 2.2MB

.idata Size: 4KB - Virtual size: 4KB

.tls Size: 4KB - Virtual size: 4KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 236KB - Virtual size: 236KB

.data
Size: 548KB - Virtual size: 2.2MB

.idata
Size: 4KB - Virtual size: 4KB

.tls
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 32KB - Virtual size: 31KB