8097a379aee6e77e771b0efbc02cd01fbf50034ab16567781208133c5766c82f

Sharing

Copy URL Twitter E-mail

General

Target

8097a379aee6e77e771b0efbc02cd01fbf50034ab16567781208133c5766c82f
Size

851KB
MD5

50c169893a5f006fab816c88f038fc88
SHA1

49fc43cc00c7659ecc1d30fccd14a41c383c0432
SHA256

8097a379aee6e77e771b0efbc02cd01fbf50034ab16567781208133c5766c82f
SHA512

06da51d8eb5b9b485cea574783eeaf87f57aa1a6b05cc592ad5b1f57d6072dcb43b32b1cee48c2433291c92b5881f3297efd71847b221117a453c4ba6afb880e
SSDEEP

12288:Y3eszd1Hnj78RQcvFLRvb9LcHeXq89NG+mGjP/4Elgzlg6o8wcuaWXNoCwDsVk8u:W1X8dTcHeXf9YfG7g/Am2LWHdEJ7w

Score

N/A

Malware Config

Signatures

Files

8097a379aee6e77e771b0efbc02cd01fbf50034ab16567781208133c5766c82f
.exe windows x86

f2c701f563bad994d6a5df23be6f4edf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

NetUserModalsSet
NetGetDCName
NetShareAdd
NetRenameMachineInDomain
NetServiceEnum
NetUserChangePassword
NetGroupSetInfo
NetUseAdd
NetGetJoinInformation
I_NetServerAuthenticate
NetLocalGroupDelMember
NetGetAnyDCName
NetLocalGroupEnum
NetSessionDel
DsGetSiteNameW
NetServerDiskEnum

advapi32

RegDeleteKeyW
RegCreateKeyExW
CreateServiceA
RegisterTraceGuidsW
RegSetValueExW
RegSetKeySecurity
RegQueryMultipleValuesA
GetSidSubAuthorityCount
RegSetValueW
CryptGenRandom
AreAnyAccessesGranted
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetTokenInformation

comctl32

ImageList_GetBkColor
CreatePropertySheetPageA
ImageList_DrawIndirect
ImageList_DragEnter
CreatePropertySheetPageW
ImageList_Write
PropertySheetW
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_Create
ImageList_DrawEx

msvcrt

_mbsnicmp
_ecvt
??0exception@@QAE@ABV0@@Z
_dup2
_wrename
__lc_collate_cp
iswupper
_ftime
_findnext
_wfullpath
_chsize
isprint
abs
mktime

kernel32

GetLocaleInfoA
SetThreadPriorityBoost
SetConsoleKeyShortcuts
CreateFileA
FlushViewOfFile
VirtualAlloc
GetVersion
LeaveCriticalSection
OpenEventW
FindFirstFileExW
Module32FirstW
SetVolumeLabelA

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dOmv
Size: 204KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UjY
Size: 433KB - Virtual size: 666KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2c701f563bad994d6a5df23be6f4edf

Headers

File Characteristics

Imports

netapi32

advapi32

comctl32

msvcrt

kernel32

Sections

.text Size: 76KB - Virtual size: 76KB

.dOmv Size: 204KB - Virtual size: 347KB

.UjY Size: 433KB - Virtual size: 666KB

.rsrc Size: 135KB - Virtual size: 135KB

.reloc Size: 1024B - Virtual size: 720B

.text
Size: 76KB - Virtual size: 76KB

.dOmv
Size: 204KB - Virtual size: 347KB

.UjY
Size: 433KB - Virtual size: 666KB

.rsrc
Size: 135KB - Virtual size: 135KB

.reloc
Size: 1024B - Virtual size: 720B