ddfe2c7d867a27d2c9b226894b3e8fc8804abb5f568285ccc3bc587db2b24b93

Sharing

Copy URL Twitter E-mail

General

Target

ddfe2c7d867a27d2c9b226894b3e8fc8804abb5f568285ccc3bc587db2b24b93
Size

249KB
MD5

69a3ea00e691e52a86f45a6f573bdca0
SHA1

c320d0a1a863f90628081d7c7ad6224a9c0e9875
SHA256

ddfe2c7d867a27d2c9b226894b3e8fc8804abb5f568285ccc3bc587db2b24b93
SHA512

ed786257922538dd7c297f4d9575bb30bca221985db7d07970f5bf63cc0ba387d8c27d9c9f2d6d15671e5d0e7f66ef6ff29ac644037eaf6788ec5369eae73caf
SSDEEP

6144:WHHFJVyEsMB3wevJ2yvegLyuH8qM5i+xBUgQXLZqWT:2ly0lxl3H8qCiiIL/

Score

N/A

Malware Config

Signatures

Files

ddfe2c7d867a27d2c9b226894b3e8fc8804abb5f568285ccc3bc587db2b24b93
.exe windows x86

3f936d2db662758de9f4d035b1dc7710

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fscanf
??_V@YAXPAX@Z
_mbsnicoll
_longjmpex
_utime
__set_app_type
_adj_fdiv_m16i
_fputwchar
vwprintf
wcsncpy
_getpid
__p__commode
_strnset
ungetwc
_cscanf
_chkesp
__unguarded_readlc_active
exit
_wstati64
_wexecvpe
__p__pctype
__getmainargs
_onexit
_CItanh
_mktime64

kernel32

GetExitCodeThread
GetEnvironmentVariableW
CreateJobObjectW
GetConsoleCP
DuplicateHandle
Process32Next
GetStringTypeExW
GetConsoleInputExeNameW
LoadLibraryW
InitializeCriticalSection
GetLastError
BuildCommDCBA
GetCurrentConsoleFont
lstrcmpiA
RemoveVectoredExceptionHandler
GetUserDefaultLCID
GetSystemTimeAsFileTime
CloseConsoleHandle
ExpandEnvironmentStringsW
GetCompressedFileSizeA
UpdateResourceA

rasman

RasPortListen
RasEnableIpSec
RasRpcConnectServer
RasSecurityDialogSend
RasCompressionSetInfo
RasGetDevConfig
RasPortEnumProtocols
RasBundleGetStatistics
RasReferenceRasman
RasGetDevConfigEx
RasPortSetFramingEx

resutils

ResUtilGetPropertiesToParameterBlock
ResUtilVerifyResourceService
ResUtilEnumProperties
ResUtilSetDwordValue
ResUtilGetMultiSzProperty
ResUtilResourcesEqual
ResUtilSetPropertyParameterBlock
ResUtilVerifyPropertyTable
ResUtilDupString
ResUtilSetResourceServiceEnvironment

catsrvut

RegDBRestore
??0CComPlusInterface@@QAE@ABV0@@Z
DllRegisterServer
ManagedRequestW
??4CComPlusObject@@QAEAAV0@ABV0@@Z
SysprepComplus2
SysprepComplus
??4CComPlusTypelib@@QAEAAV0@ABV0@@Z
?GetITypeLib@CComPlusTypelib@@QAEPAUITypeLib@@XZ
??0CComPlusMethod@@QAE@ABV0@@Z
??_7CComPlusObject@@6B@
??1CComPlusComponent@@UAE@XZ
??_7CComPlusMethod@@6B@
QueryUserDllW
COMPlusUninstallActionW
WinlogonHandlePendingInfOperations
??4CComPlusInterface@@QAEAAV0@ABV0@@Z

rtm

MgmGetNextMfeStats
RtmGetLessSpecificDestination
RtmGetExactMatchDestination
MgmDeRegisterMProtocol
RtmDeleteRouteList
RtmGetRegisteredEntities
RtmReleaseNextHopInfo
RtmGetChangedDests
RtmGetEnumRoutes
RtmDequeueRouteChangeMessage
RtmMarkDestForChangeNotification
MgmGroupEnumerationEnd
DeleteFromTable
RtmRegisterForChangeNotification
RtmReleaseChangedDests
RtmCreateEnumerationHandle
MgmGroupEnumerationStart
RtmGetDestInfo
RtmGetNextRoute
RtmGetChangeStatus
MgmGroupEnumerationGetNext
RtmInvokeMethod
RtmDeleteNextHop
RtmDeleteRoute
RtmBlockMethods
RtmGetEntityMethods
MgmGetFirstMfeStats
RtmGetOpaqueInformationPointer

wshrm

WSHAddressToString
WSHGetWSAProtocolInfo
WSHSetSocketInformation
WSHEnumProtocols
WSHGetSocketInformation
WSHIoctl
WSHGetBroadcastSockaddr
WSHGetWildcardSockaddr
WSHGetProviderGuid
WSHNotify
WSHOpenSocket
WSHJoinLeaf
WSHStringToAddress
WSHOpenSocket2
WSHGetSockaddrType
WSHGetWinsockMapping

user32

EndDialog

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f936d2db662758de9f4d035b1dc7710

Headers

File Characteristics

Imports

msvcrt

kernel32

rasman

resutils

catsrvut

rtm

wshrm

user32

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 131KB - Virtual size: 131KB

.data Size: 51KB - Virtual size: 50KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 131KB - Virtual size: 131KB

.data
Size: 51KB - Virtual size: 50KB

.rsrc
Size: 6KB - Virtual size: 6KB