8480c34b6298ca99a3846d72b942461ee92c32c14dc69ba2fe4a5b254d262b70

Sharing

Copy URL Twitter E-mail

General

Target

8480c34b6298ca99a3846d72b942461ee92c32c14dc69ba2fe4a5b254d262b70
Size

1.1MB
MD5

6262bf4dfe5b57796df5a4acac26009f
SHA1

ac8aac686fa075491d0d4fecafe889161e237047
SHA256

8480c34b6298ca99a3846d72b942461ee92c32c14dc69ba2fe4a5b254d262b70
SHA512

05434f212e02ad3a600bfc1e717eda3985907a72cfa3bc380f57444012db90723f73601a611427eeae354400bc7a4fe4292cdf3876b915ccf24b388448d768a7
SSDEEP

24576:kp5SQmb1AQ2ZdIvjgy9UkT4iCaJBtGp8pFugSojuIzHi50TeRZeV4ND2bLZffPzZ:kpAhb1AQ2ZdIvM0B0iCaJBtIeC5dS4N2

Score

N/A

Malware Config

Signatures

Files

8480c34b6298ca99a3846d72b942461ee92c32c14dc69ba2fe4a5b254d262b70
.exe windows x86

f793b668c1a73e59202eab7b252f42eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnumSystemLocalesA
BindIoCompletionCallback
Process32NextW
lstrcpyW
Module32Next
ReadFile
SetHandleInformation
IsBadReadPtr
GetStringTypeExA
GetCurrentDirectoryW
CreateRemoteThread
VirtualAlloc
CopyFileW
WideCharToMultiByte
InterlockedIncrement
LockFile
GlobalDeleteAtom

netapi32

NetFileGetInfo
NetGroupGetUsers
NetGroupDelUser
NetGetDCName
NetLocalGroupGetInfo
NetUserChangePassword
I_NetServerReqChallenge
DsGetSiteNameW
NetShareSetInfo
NetQueryDisplayInformation
NetUnjoinDomain
NetGetJoinInformation
NetShareDel

advapi32

AddAccessAllowedAce
GetSidIdentifierAuthority
DeregisterEventSource
RegDeleteKeyA
ConvertSecurityDescriptorToStringSecurityDescriptorW
CryptCreateHash
RegisterServiceCtrlHandlerA
GetTokenInformation
RegSetValueA
RegisterTraceGuidsW
NotifyBootConfigStatus
ProcessTrace

iphlpapi

GetIpStatistics
DeleteProxyArpEntry
InternalGetTcpTable
InternalGetIpAddrTable
InternalSetIfEntry
GetTcpStatistics
InternalGetIpForwardTable
InternalSetTcpEntry

Sections

.text
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bMcxr
Size: 292KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XizE
Size: 208KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xsOhW
Size: 288KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f793b668c1a73e59202eab7b252f42eb

Headers

File Characteristics

Imports

kernel32

netapi32

advapi32

iphlpapi

Sections

.text Size: 192KB - Virtual size: 189KB

.bMcxr Size: 292KB - Virtual size: 428KB

.XizE Size: 208KB - Virtual size: 395KB

.xsOhW Size: 288KB - Virtual size: 448KB

.rsrc Size: 136KB - Virtual size: 135KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 192KB - Virtual size: 189KB

.bMcxr
Size: 292KB - Virtual size: 428KB

.XizE
Size: 208KB - Virtual size: 395KB

.xsOhW
Size: 288KB - Virtual size: 448KB

.rsrc
Size: 136KB - Virtual size: 135KB

.reloc
Size: 4KB - Virtual size: 1KB