2fe5c67b42ae70d9a2fa7133f1a403df41bd3c1014bdba84d951dcc039f7c204

General

Target

2fe5c67b42ae70d9a2fa7133f1a403df41bd3c1014bdba84d951dcc039f7c204
Size

6.8MB
MD5

185581858c30c0da943828fc2818eecc
SHA1

dac437d4a15b39ae8d85a499b01ed763dec1e77b
SHA256

2fe5c67b42ae70d9a2fa7133f1a403df41bd3c1014bdba84d951dcc039f7c204
SHA512

7ab2785a4514e7005cdcf88edb7be714dd0571d3671a06e898309618534168319eb1169c1b70174dc0952eb03ad0583cc045573f87dd8b39cd241a0d1ef98361
SSDEEP

98304:L89YrT0a2xcHJWCuR/za73UbBVW0F2xCUHzZRafUmw3wPBcj5ex8G63KjmaVcRcx:gqrgw4vmEFVW0LEk8mw3wG1ej6WcYZ1P

Score

N/A

Malware Config

Signatures

Files

2fe5c67b42ae70d9a2fa7133f1a403df41bd3c1014bdba84d951dcc039f7c204
.exe windows x86

92a4871a01635e9085f3c3caf307adac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNamesForVolumeNameA
CreateThread
GetTimeZoneInformation
CreateProcessInternalW
VirtualAlloc
LockFile
ConnectNamedPipe
GetThreadLocale
LoadLibraryA
ReadConsoleInputA
PeekConsoleInputW
SetLocalPrimaryComputerNameA
SetNamedPipeHandleState
LZClose
EnumerateLocalComputerNamesA
LocalAlloc
FindResourceA
RtlCaptureStackBackTrace
GetModuleHandleA
GetPrivateProfileIntA

esent

JetMakeKey
JetResetSessionContext
JetOpenTable
JetGetRecordPosition
JetEnumerateColumns
JetGetTableColumnInfo
JetDefragment2
JetRetrieveTaggedColumnList
JetSetTableSequential
JetEndSession@8
JetGetInstanceInfo
JetGetLogInfoInstance
JetGetLS
JetSnapshotStop
JetUpdate
JetCreateDatabase
JetStopService
JetDetachDatabase
JetRenameTable
JetGetDatabaseInfo
JetCommitTransaction
JetRestoreInstance
JetEndExternalBackupInstance2

rasmxs

DeviceSetInfo
DeviceConnect
DeviceListen
DeviceDone
DeviceWork
DeviceGetInfo
DeviceEnum

Sections

.text
Size: 452KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 294KB - Virtual size: 926KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92a4871a01635e9085f3c3caf307adac

Headers

File Characteristics

Imports

kernel32

esent

rasmxs

Sections

.text Size: 452KB - Virtual size: 452KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 294KB - Virtual size: 926KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 452KB - Virtual size: 452KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 294KB - Virtual size: 926KB

.rsrc
Size: 6KB - Virtual size: 6KB