f9d506e84d2145806f10901d79a9853da6edd190ee953ec75bc69f69d7631716

Sharing

Copy URL Twitter E-mail

General

Target

f9d506e84d2145806f10901d79a9853da6edd190ee953ec75bc69f69d7631716
Size

48KB
MD5

6281df5d1eafff888cfbe192cba89e00
SHA1

8a46874396da1f2c4749bcd04f5c53456e614e37
SHA256

f9d506e84d2145806f10901d79a9853da6edd190ee953ec75bc69f69d7631716
SHA512

6e9208ba184de2ba531d734238ca77a7dc6c3abbb635f86e10f6a41722dc053834e5f1694859245b181093b8706cb3e11f6cfdc9f172504d4bf1e1569f789b85
SSDEEP

1536:L6jwHb9Oo2VxVTkjx2lqdvY55BED4VuWjLF:8wHxf2VkDdQ55BEwtV

Score

N/A

Malware Config

Signatures

Files

f9d506e84d2145806f10901d79a9853da6edd190ee953ec75bc69f69d7631716
.exe windows x86

ee70688ea3b835154ff2f75430cb6438

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdsapi

DsCrackUnquotedMangledRdnA
DsCrackUnquotedMangledRdnW
DsFreeDomainControllerInfoA
DsFreeNameResultA
DsFreeNameResultW
DsFreePasswordCredentials
DsFreeSchemaGuidMapA
DsFreeSchemaGuidMapW
DsFreeSpnArrayA

hhsetup

??0CCollection@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFolder@@QAE@XZ
??0CLocation@@QAE@XZ
??0CPointerList@@QAE@XZ
??0CTitle@@QAE@XZ
??1CCollection@@QAE@XZ

oledlg

OleUIPasteSpecialA
OleUIChangeIconA

atl

AtlAxCreateControl
AtlAxCreateControl
AtlAxCreateControl
AtlAxCreateControl
AtlAxCreateControl
AtlAxCreateControl

msvcrt

fopen
fread

kernel32

GetWindowsDirectoryA
GetConsoleAliasA
SetFilePointer
MulDiv
GetOEMCP
GetACP
ExitProcess
GetExitCodeProcess
GetCommandLineA

dnsapi

DnsAllocateRecord
DnsApiAlloc
DnsApiFree
DnsApiHeapReset
DnsApiRealloc
DnsApiSetDebugGlobals

comsnap

InstallDsExtension

htui

HTUI_ColorAdjustment

polstore

IPSecClosePolicyStore
IPSecCopyAuthMethod
IPSecCopyFilterData
IPSecCopyFilterSpec
IPSecCopyISAKMPData
IPSecCopyNFAData
IPSecCopyNegPolData
IPSecCopyPolicyData
IPSecCreateFilterData
IPSecCreateISAKMPData
IPSecCreateNFAData
IPSecCreateNegPolData
IPSecCreatePolicyData
IPSecDeleteFilterData
IPSecDeleteISAKMPData
IPSecDeleteNFAData
IPSecDeleteNegPolData
IPSecDeletePolicyData
IPSecEnumFilterData
IPSecEnumISAKMPData

regapi

RegWdQueryA
RegWdQueryW
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA
RegCdQueryW
RegCloseServer
RegConsoleShadowQueryA
RegConsoleShadowQueryW
RegDefaultUserConfigQueryA
RegDefaultUserConfigQueryW

dbghelp

ImageRvaToSection
ImageRvaToVa

Sections

.code
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ee70688ea3b835154ff2f75430cb6438

Headers

File Characteristics

Imports

ntdsapi

hhsetup

oledlg

atl

msvcrt

kernel32

dnsapi

comsnap

htui

polstore

regapi

dbghelp

Sections

.code Size: 7KB - Virtual size: 8KB

.data Size: 9KB - Virtual size: 77KB

.pdata Size: 26KB - Virtual size: 28KB

.code
Size: 7KB - Virtual size: 8KB

.data
Size: 9KB - Virtual size: 77KB

.pdata
Size: 26KB - Virtual size: 28KB