fb2ba4b11fc45093236137f3653dad46572e20088a23c5c7a11cbe0c267dd9a2

General

Target

fb2ba4b11fc45093236137f3653dad46572e20088a23c5c7a11cbe0c267dd9a2
Size

529KB
MD5

5ec78e7d0a680f41fde4bfabb2165820
SHA1

bc3a3bae62dd6974cb8e1bdc51e7b64066553c32
SHA256

fb2ba4b11fc45093236137f3653dad46572e20088a23c5c7a11cbe0c267dd9a2
SHA512

7ab63b598bdca916466840c477dc45feb727ac2adec5410bd33e8be9c10a9e9aa35fe4962a76425631dddd9a4f523f1251ef82da7d27791c4aff92272e564939
SSDEEP

12288:wTjOMNUTItXhDHXE05K3Ezv6n5NC4Gu4y/2zuWRPV2I21uVAbrlcNx:0OMN0iXhDHXrM3uvXtuvuzuWRwI21uS6

Score

N/A

Malware Config

Signatures

Files

fb2ba4b11fc45093236137f3653dad46572e20088a23c5c7a11cbe0c267dd9a2
.exe windows x86

55ef006dc452584a4e702ccb6595bc76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

tapi32

lineConfigDialogW
phoneGetData
lineGetDevCaps
lineGetDevCapsW

imagehlp

ImageNtHeader
SymSetOptions
ImageRvaToSection
ImageUnload
ImageLoad
SymInitialize
ImageRvaToVa

advapi32

RegQueryValueExA
EqualPrefixSid
TraceMessage
AddAccessAllowedAce
AccessCheck
RegQueryInfoKeyA
GetSidLengthRequired
CryptImportKey
CryptDeriveKey

kernel32

SetDefaultCommConfigW
EnumResourceLanguagesA
DnsHostnameToComputerNameW
GetVersion
EnumCalendarInfoW
VirtualAlloc
EnumResourceTypesA
DeleteVolumeMountPointA
EnumLanguageGroupLocalesW
EnumResourceLanguagesW
ResumeThread
LoadLibraryA
EnumLanguageGroupLocalesA
EnumDateFormatsW
DeviceIoControl
DnsHostnameToComputerNameA
DeleteTimerQueueEx
CreateMailslotW
EnumTimeFormatsW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 258KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 222KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55ef006dc452584a4e702ccb6595bc76

Headers

DLL Characteristics

File Characteristics

Imports

tapi32

imagehlp

advapi32

kernel32

Sections

.text Size: 9KB - Virtual size: 8KB

INIT Size: 258KB - Virtual size: 340KB

BSS Size: 222KB - Virtual size: 407KB

.rsrc Size: 39KB - Virtual size: 38KB

.text
Size: 9KB - Virtual size: 8KB

INIT
Size: 258KB - Virtual size: 340KB

BSS
Size: 222KB - Virtual size: 407KB

.rsrc
Size: 39KB - Virtual size: 38KB