90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab

General

Target

90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab
Size

820KB
MD5

00f153ada687cbe898e7bf75843dd205
SHA1

5f996139a57f17a603989884b87e6a72132f88af
SHA256

90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab
SHA512

e7a8ed8db86d17fefb0925f008fe2c0aeebb091e377147f5d78d101807621362b2dcc64ce403a6ec0e01888f4738745e85778b22ea5c37c20ee22592488e4a3c
SSDEEP

12288:wFey/RIqV24ExFh8uEh6n+DYs5+fVn9ocMBDJaLaz0oAcIPwqaV:sR/sd2uEo9fVnScEt/AcIja

Score

N/A

Malware Config

Signatures

Files

90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab
.exe windows x86

8e8495d98b2ef969cee14385475340e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

imagehlp

BindImage

rtm

BestMatchInTable
CheckTable
CreateTable
DeleteFromTable
DestroyTable
DumpTable
EnumOverTable
InsertIntoTable
MgmAddGroupMembershipEntry
MgmDeInitialize
MgmDeRegisterMProtocol
MgmDeleteGroupMembershipEntry
MgmGetFirstMfe
MgmGetFirstMfeStats
MgmGetMfe
MgmGetMfeStats
MgmGetNextMfe
MgmGetNextMfeStats
MgmGetProtocolOnInterface
MgmGroupEnumerationEnd
MgmGroupEnumerationGetNext
MgmGroupEnumerationStart
MgmInitialize
MgmRegisterMProtocol
MgmReleaseInterfaceOwnership
MgmTakeInterfaceOwnership
NextMatchInTable
RtmAddNextHop
RtmBlockConvertRoutesToStatic
RtmBlockConvertRoutesToStatic
RtmBlockConvertRoutesToStatic

kernel32

SetConsoleCP
GetTickCount
GetWindowsDirectoryW
GetThreadContext
IsBadCodePtr
OpenEventW
GetSystemTime
SetConsoleCursor
MulDiv
GetTempPathA
CreateFileA
GetTempPathW

regapi

RegBuildNumberQuery
RegCdCreateA
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA

lz32

LZRead

Sections

.text
Size: 28KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 762KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.neolit
Size: 5KB - Virtual size: 8KB

Sharing

General

Malware Config

Signatures

Files

8e8495d98b2ef969cee14385475340e8

Headers

File Characteristics

Imports

imagehlp

rtm

kernel32

regapi

lz32

Sections

.text Size: 28KB - Virtual size: 35KB

.data Size: 12KB - Virtual size: 14KB

.rsrc Size: 762KB - Virtual size: 764KB

.neolit Size: 5KB - Virtual size: 8KB

.text
Size: 28KB - Virtual size: 35KB

.data
Size: 12KB - Virtual size: 14KB

.rsrc
Size: 762KB - Virtual size: 764KB

.neolit
Size: 5KB - Virtual size: 8KB