3bac28bebcf700b5bbd59e2f31767833558f0291386d5a8a2ad3d3bbc9f5fb32

General

Target

3bac28bebcf700b5bbd59e2f31767833558f0291386d5a8a2ad3d3bbc9f5fb32
Size

978KB
MD5

ea988468988c26a1f4062b990a4fcc05
SHA1

b623032868b382399a9aa13708772071be948986
SHA256

3bac28bebcf700b5bbd59e2f31767833558f0291386d5a8a2ad3d3bbc9f5fb32
SHA512

b22d49dad0f768e5517fc4141f541193cd94e0e9eeacd3de88899dbc0ce67c898dd64bbde856a807cf2910c99900bc4a1ef55b2a2029e8574d26a385cd57d356
SSDEEP

24576:Wsz2uOWUuJmLY5DnJOnS7BT0n+DZ4JPohAbnSIiEr9kHj:Wu2lWXOYZnT1T0+DGNCj

Score

N/A

Malware Config

Signatures

Files

3bac28bebcf700b5bbd59e2f31767833558f0291386d5a8a2ad3d3bbc9f5fb32
.exe windows x86

92a4871a01635e9085f3c3caf307adac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNamesForVolumeNameA
CreateThread
GetTimeZoneInformation
CreateProcessInternalW
VirtualAlloc
LockFile
ConnectNamedPipe
GetThreadLocale
LoadLibraryA
ReadConsoleInputA
PeekConsoleInputW
SetLocalPrimaryComputerNameA
SetNamedPipeHandleState
LZClose
EnumerateLocalComputerNamesA
LocalAlloc
FindResourceA
RtlCaptureStackBackTrace
GetModuleHandleA
GetPrivateProfileIntA

esent

JetMakeKey
JetResetSessionContext
JetOpenTable
JetGetRecordPosition
JetEnumerateColumns
JetGetTableColumnInfo
JetDefragment2
JetRetrieveTaggedColumnList
JetSetTableSequential
JetEndSession@8
JetGetInstanceInfo
JetGetLogInfoInstance
JetGetLS
JetSnapshotStop
JetUpdate
JetCreateDatabase
JetStopService
JetDetachDatabase
JetRenameTable
JetGetDatabaseInfo
JetCommitTransaction
JetRestoreInstance
JetEndExternalBackupInstance2

rasmxs

DeviceSetInfo
DeviceConnect
DeviceListen
DeviceDone
DeviceWork
DeviceGetInfo
DeviceEnum

Sections

.text
Size: 452KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 294KB - Virtual size: 926KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92a4871a01635e9085f3c3caf307adac

Headers

File Characteristics

Imports

kernel32

esent

rasmxs

Sections

.text Size: 452KB - Virtual size: 452KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 294KB - Virtual size: 926KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 452KB - Virtual size: 452KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 294KB - Virtual size: 926KB

.rsrc
Size: 6KB - Virtual size: 5KB