7a626899247621f53534656b23a99ce7caf484d74af5677ff01b9864c1e8f063

General

Target

7a626899247621f53534656b23a99ce7caf484d74af5677ff01b9864c1e8f063
Size

554KB
MD5

5bb228762b13c62a0c14067eef5518f0
SHA1

44097dc913ea5abf606488388ce33c866f54e0ab
SHA256

7a626899247621f53534656b23a99ce7caf484d74af5677ff01b9864c1e8f063
SHA512

889ac3a5ab12e4f3a8349bcb7dfd12ccb1f9fab5aa768082a485365309f6e8a8b6713310bd882abb1f26b5a4a2b79f596146592c960be01ee51e308ca6040fd7
SSDEEP

6144:fjyBWf4Qd/A3lcli1sM2cCLkGt8FwejJa0+ikHUxi91FwJyb7vNkcsivnSC6A+LE:WBWfxdolcw1sr8zjJpkHpaJQss+L3U

Score

N/A

Malware Config

Signatures

Files

7a626899247621f53534656b23a99ce7caf484d74af5677ff01b9864c1e8f063
.exe windows x86

627b81e4fc4ccf802c676e8c62eea655

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

BeginUpdateResourceW
VirtualAlloc
CreateMailslotA
SetThreadAffinityMask
SystemTimeToTzSpecificLocalTime
TransactNamedPipe
OpenConsoleW
GetTempPathW
GetDateFormatA
GetWindowsDirectoryW

tapi32

lineGetDevConfigA
lineOpenA
tapiGetLocationInfoW
lineConfigDialog
lineInitialize
lineBlindTransferA
lineAccept

msvcrt

strtol
_tell
frexp
strncpy
_strupr
towupper

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 139KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 89KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 58KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 98KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 73KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

627b81e4fc4ccf802c676e8c62eea655

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

tapi32

msvcrt

Sections

.text Size: 36KB - Virtual size: 35KB

.bss Size: 139KB - Virtual size: 227KB

.bss Size: 89KB - Virtual size: 136KB

.idata Size: 58KB - Virtual size: 95KB

.edata Size: 98KB - Virtual size: 171KB

.bss Size: 73KB - Virtual size: 163KB

.rsrc Size: 59KB - Virtual size: 59KB

.text
Size: 36KB - Virtual size: 35KB

.bss
Size: 139KB - Virtual size: 227KB

.bss
Size: 89KB - Virtual size: 136KB

.idata
Size: 58KB - Virtual size: 95KB

.edata
Size: 98KB - Virtual size: 171KB

.bss
Size: 73KB - Virtual size: 163KB

.rsrc
Size: 59KB - Virtual size: 59KB