f12ab291c5c7285f887d4fde8ad4ec8f846caab3e369cfc7701532548c3a8024

Sharing

Copy URL Twitter E-mail

General

Target

f12ab291c5c7285f887d4fde8ad4ec8f846caab3e369cfc7701532548c3a8024
Size

537KB
MD5

4924e0d34d526bcc1b9a44cc02f99a20
SHA1

7b6dd831242a1e521fc2c0e98acb81e1ad558f3b
SHA256

f12ab291c5c7285f887d4fde8ad4ec8f846caab3e369cfc7701532548c3a8024
SHA512

6e6e46e7309f70048bad2d3313d192f6ac8f171fe99f6bb1b49d3d3639a328df130813b66bdf8537e562126eea382be40662484ac63e65768497b570a2b90017
SSDEEP

12288:teP43JQbx7kxfR5av1ZZQWXU5woa3Mih3RIPbqjMDpiU2lB:/AYfR52Zdk5Ha8ixGPalB

Score

N/A

Malware Config

Signatures

Files

f12ab291c5c7285f887d4fde8ad4ec8f846caab3e369cfc7701532548c3a8024
.exe windows x86

23285c678d2dcc516df9bf6ed7bb102a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

InitAtomTable
VirtualAlloc
SetUnhandledExceptionFilter
GetProcessTimes
EnumUILanguagesW
SetThreadExecutionState
GlobalMemoryStatusEx
Process32First
FindAtomW
SearchPathW
GlobalDeleteAtom
TlsAlloc
FindFirstFileA
EnumResourceLanguagesW

tapi32

lineGetID
lineAccept
lineNegotiateExtVersion
lineGetIDA
lineGetAddressCapsA
lineMakeCallA
lineBlindTransferA

oleaut32

VariantClear
GetActiveObject
SysAllocStringByteLen

advapi32

RegSetValueW
AccessCheck
RegCreateKeyExA
AddAccessDeniedAce
SetKernelObjectSecurity
SetNamedSecurityInfoW
ReportEventW
AreAnyAccessesGranted
InitiateSystemShutdownW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 150KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 129KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 71KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 97KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 32KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23285c678d2dcc516df9bf6ed7bb102a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

tapi32

oleaut32

advapi32

Sections

.text Size: 18KB - Virtual size: 17KB

.bss Size: 150KB - Virtual size: 199KB

.edata Size: 129KB - Virtual size: 173KB

.idata Size: 71KB - Virtual size: 76KB

.bss Size: 97KB - Virtual size: 165KB

.bss Size: 32KB - Virtual size: 153KB

.rsrc Size: 39KB - Virtual size: 38KB

.text
Size: 18KB - Virtual size: 17KB

.bss
Size: 150KB - Virtual size: 199KB

.edata
Size: 129KB - Virtual size: 173KB

.idata
Size: 71KB - Virtual size: 76KB

.bss
Size: 97KB - Virtual size: 165KB

.bss
Size: 32KB - Virtual size: 153KB

.rsrc
Size: 39KB - Virtual size: 38KB