a6ec5943cd9d997808b0d040e8399d8129a65daf000cf61804e91e62810712f0

General

Target

a6ec5943cd9d997808b0d040e8399d8129a65daf000cf61804e91e62810712f0
Size

556KB
MD5

6d4fb0f8e787e3e2fb901f8afb2815a0
SHA1

7881b1c096612deef4ecf5c214753ba8956a2623
SHA256

a6ec5943cd9d997808b0d040e8399d8129a65daf000cf61804e91e62810712f0
SHA512

d27e0d0eadea789c01d60c1f70503dc32dccb2e08ca0eaa052c35a0b92c1d0a7144d28afd9c3db185c5b673fb6224698d778b3b6593bdb3e13d3bd72f56d2061
SSDEEP

12288:4fia6L1QEfwDT7o1cwrUePGdwEXxO80LtQbPi:4KFfoTTeWID8q

Score

N/A

Malware Config

Signatures

Files

a6ec5943cd9d997808b0d040e8399d8129a65daf000cf61804e91e62810712f0
.exe windows x86

55ef006dc452584a4e702ccb6595bc76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

tapi32

lineConfigDialogW
phoneGetData
lineGetDevCaps
lineGetDevCapsW

imagehlp

ImageNtHeader
SymSetOptions
ImageRvaToSection
ImageUnload
ImageLoad
SymInitialize
ImageRvaToVa

advapi32

RegQueryValueExA
EqualPrefixSid
TraceMessage
AddAccessAllowedAce
AccessCheck
RegQueryInfoKeyA
GetSidLengthRequired
CryptImportKey
CryptDeriveKey

kernel32

SetDefaultCommConfigW
EnumResourceLanguagesA
DnsHostnameToComputerNameW
GetVersion
EnumCalendarInfoW
VirtualAlloc
EnumResourceTypesA
DeleteVolumeMountPointA
EnumLanguageGroupLocalesW
EnumResourceLanguagesW
ResumeThread
LoadLibraryA
EnumLanguageGroupLocalesA
EnumDateFormatsW
DeviceIoControl
DnsHostnameToComputerNameA
DeleteTimerQueueEx
CreateMailslotW
EnumTimeFormatsW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 261KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 225KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55ef006dc452584a4e702ccb6595bc76

Headers

DLL Characteristics

File Characteristics

Imports

tapi32

imagehlp

advapi32

kernel32

Sections

.text Size: 9KB - Virtual size: 8KB

INIT Size: 261KB - Virtual size: 347KB

BSS Size: 225KB - Virtual size: 419KB

.rsrc Size: 59KB - Virtual size: 59KB

.text
Size: 9KB - Virtual size: 8KB

INIT
Size: 261KB - Virtual size: 347KB

BSS
Size: 225KB - Virtual size: 419KB

.rsrc
Size: 59KB - Virtual size: 59KB