552f8d28dd4aba3a62ff308d0c23cb3d177746e139bec2fb8a4d78323c009d3a

Sharing

Copy URL Twitter E-mail

General

Target

552f8d28dd4aba3a62ff308d0c23cb3d177746e139bec2fb8a4d78323c009d3a
Size

284KB
MD5

41f63779d41c94bbd2609ecb660ae8b0
SHA1

1343641685688cbf953849013e11d976e4ab9f92
SHA256

552f8d28dd4aba3a62ff308d0c23cb3d177746e139bec2fb8a4d78323c009d3a
SHA512

5afaa87957b738e072f71c0c365f1b40d976c919d57cc72f8e040d961fce9a654fdb6476b06c29daa74f34b4a759f4e78fb39f6daae10ed1275b693eaa06f6bc
SSDEEP

6144:OcJtO61uXuay3FfcveSqjtsgPxLKNvT0VpTjAGdmzBVkvsEkmJGqxmygIqnBvfGD:NJtO61u+poctFLKBT0fwGvdksGqxKSzH

Score

N/A

Malware Config

Signatures

Files

552f8d28dd4aba3a62ff308d0c23cb3d177746e139bec2fb8a4d78323c009d3a
.exe windows x86

92b0f1b5b4d8f6d7891c110ece44af08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeEnvironmentStringsW
ReplaceFileW
WritePrivateProfileStringW
FindFirstFileExW
SetConsoleWindowInfo
GlobalAlloc
GetVersionExA
GetStartupInfoW
WriteConsoleA
LoadLibraryW
GetOverlappedResult
CreateTimerQueue
ReadConsoleW
ReadConsoleOutputW
NlsGetCacheUpdateCount
HeapQueryInformation
lstrcpynA
EnumResourceNamesW
ReadConsoleInputExW
GetComputerNameExA
SetClientTimeZoneInformation
GetVolumePathNameA
ReadConsoleInputW
BuildCommDCBA
GetCalendarInfoA
ReadConsoleInputExA
SetTimerQueueTimer
EnumDateFormatsA
SetCommBreak
HeapReAlloc
FindNextVolumeMountPointW
RegisterWowExec
ContinueDebugEvent
GetConsoleScreenBufferInfo
GetModuleHandleW
GlobalCompact
ScrollConsoleScreenBufferW
FlushInstructionCache
GetVolumeInformationW

linkinfo

CompareLinkInfoReferents
CompareLinkInfoVolumes
IsValidLinkInfo
GetCanonicalPathInfoA
GetLinkInfoData
GetCanonicalPathInfo
CreateLinkInfo
CreateLinkInfoW
ResolveLinkInfo
CreateLinkInfoA
ResolveLinkInfoW
ResolveLinkInfoA
DestroyLinkInfo
GetCanonicalPathInfoW
DisconnectLinkInfo

crtdll

_ismbcl1
_vsnwprintf
_spawnl
_clearfp
iswcntrl
tan
_strerror
_flsbuf
_lfind
vfwprintf
iswalpha
_CIasin

certcli

CAGetCAFlags
CARemoveCACertificateType
CAGetCACertificate
CAOIDCreateNew
CAGetCertTypePropertyEx
CAIsCertTypeCurrent
CAOIDFreeLdapURL
CAGetCASecurity
CASetCACertificate
CAAccessCheckEx
CAGetCAExpiration

clusapi

ClusterNodeControl
SetClusterQuorumResource
MoveClusterGroup
CreateClusterResourceType
RemoveClusterResourceNode
ClusterResourceCloseEnum
ClusterResourceTypeOpenEnum
ClusterCloseEnum
GetClusterNodeId
DeleteClusterResource
ClusterRegQueryInfoKey
SetClusterNetworkPriorityOrder
GetClusterNetworkId
CreateClusterGroup
OpenClusterNode
ClusterNetworkOpenEnum
AddClusterResourceDependency
RestoreClusterDatabase

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92b0f1b5b4d8f6d7891c110ece44af08

Headers

File Characteristics

Imports

kernel32

linkinfo

crtdll

certcli

clusapi

Sections

.text Size: 178KB - Virtual size: 177KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 73KB - Virtual size: 72KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 178KB - Virtual size: 177KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 73KB - Virtual size: 72KB

.rsrc
Size: 1KB - Virtual size: 1KB