5606ee54d18650bbfb035522a458096647a09bdcfa5b2a0caaf9b3701f238450

Sharing

Copy URL Twitter E-mail

General

Target

5606ee54d18650bbfb035522a458096647a09bdcfa5b2a0caaf9b3701f238450
Size

67KB
MD5

6bed657affddae0b7aa2d93257b424f1
SHA1

897e34581c662f7e16b89e72c247b340d7625d94
SHA256

5606ee54d18650bbfb035522a458096647a09bdcfa5b2a0caaf9b3701f238450
SHA512

d78a59034b32ca8d343ee041b609a2424cc3599bc37eb33b2781addf48675c4e82b19adfbf0954254b4d0030afc7edf932e3dd38b0091bcbabb53feb8b967165
SSDEEP

768:FLjdd4XLdkFAupmuMm4Y1NV/GjF+QwnNuSUxMY844o4iJ/X+/8Oc/:Fzyux0FlwN3/8

Score

N/A

Malware Config

Signatures

Files

5606ee54d18650bbfb035522a458096647a09bdcfa5b2a0caaf9b3701f238450
.exe windows x86

27c0702f08b2a89f3ff0244d8d47111b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
FreeLibrary
LoadLibraryW
GetSystemDirectoryW
lstrcmpiW
SetConsoleMode
GetConsoleMode
GetFileType
GetStdHandle
GetProcAddress
GetModuleHandleA
GetLastError
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetDateFormatW
GetTimeFormatW
GetModuleHandleW
MultiByteToWideChar
lstrlenW
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
QueryPerformanceCounter
FormatMessageW

msvcrt

wcscmp
??3@YAXPAX@Z
??2@YAPAXI@Z
fgetwc
_wsetlocale
_c_exit
_exit
_XcptFilter
_cexit
exit
__winitenv
_iob
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fflush
_wspawnl
_errno
time
wcslen
wprintf
printf
wcsncpy
wcspbrk
_tzset
localtime
_vsnwprintf
wcschr
_wcsicmp
_wtoi
__wgetmainargs

advapi32

ReadEventLogW
GetNumberOfEventLogRecords
GetOldestEventLogRecord
CloseEventLog
OpenEventLogW

ws2_32

inet_ntoa
WSAGetLastError
inet_addr

ole32

CLSIDFromString

wlbsctrl

WlbsDrainStop
WlbsResume
WlbsSuspend
WlbsStop
WlbsStart
WlbsQuery
WlbsPortSet
WlbsPasswordSet
WlbsEnable
WlbsEnumClusters
WlbsInit
WlbsNotifyConfigChange
WlbsWriteReg
WlbsReadReg
WlbsAddressToString
WlbsResolve
WlbsDisable
WlbsQueryState
WlbsDrain

Exports

Exports

??4WLBS_REG_PARAMS@@QAEAAU0@ABU0@@Z

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27c0702f08b2a89f3ff0244d8d47111b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

ws2_32

ole32

wlbsctrl

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 26KB

.data Size: 512B - Virtual size: 29KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 26KB - Virtual size: 26KB

.data
Size: 512B - Virtual size: 29KB

.rsrc
Size: 39KB - Virtual size: 39KB