474a0f71fc1123406658b645fbecf7e514b5512fec5c2d7847f76a1ed9f79f75

Sharing

Copy URL Twitter E-mail

General

Target

474a0f71fc1123406658b645fbecf7e514b5512fec5c2d7847f76a1ed9f79f75
Size

249KB
MD5

757e4af04b45b22df23318a667432cb9
SHA1

c954493b115b0094f6a8ff0c417121d364737a36
SHA256

474a0f71fc1123406658b645fbecf7e514b5512fec5c2d7847f76a1ed9f79f75
SHA512

69fdb93053b49bd81b160cb942fbf04ee3e4f5a261865b0007ea8293ea072cb175b840b4f34fc86baac185f32aa3331e286ac312ad1d7a7a0862689bed323c12
SSDEEP

6144:WHHFJVyEsMB3wevJ2yvegLyuH8qM5i+xBUgQXLZqW/:2ly0lxl3H8qCiiILT

Score

N/A

Malware Config

Signatures

Files

474a0f71fc1123406658b645fbecf7e514b5512fec5c2d7847f76a1ed9f79f75
.exe windows x86

3f936d2db662758de9f4d035b1dc7710

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fscanf
??_V@YAXPAX@Z
_mbsnicoll
_longjmpex
_utime
__set_app_type
_adj_fdiv_m16i
_fputwchar
vwprintf
wcsncpy
_getpid
__p__commode
_strnset
ungetwc
_cscanf
_chkesp
__unguarded_readlc_active
exit
_wstati64
_wexecvpe
__p__pctype
__getmainargs
_onexit
_CItanh
_mktime64

kernel32

GetExitCodeThread
GetEnvironmentVariableW
CreateJobObjectW
GetConsoleCP
DuplicateHandle
Process32Next
GetStringTypeExW
GetConsoleInputExeNameW
LoadLibraryW
InitializeCriticalSection
GetLastError
BuildCommDCBA
GetCurrentConsoleFont
lstrcmpiA
RemoveVectoredExceptionHandler
GetUserDefaultLCID
GetSystemTimeAsFileTime
CloseConsoleHandle
ExpandEnvironmentStringsW
GetCompressedFileSizeA
UpdateResourceA

rasman

RasPortListen
RasEnableIpSec
RasRpcConnectServer
RasSecurityDialogSend
RasCompressionSetInfo
RasGetDevConfig
RasPortEnumProtocols
RasBundleGetStatistics
RasReferenceRasman
RasGetDevConfigEx
RasPortSetFramingEx

resutils

ResUtilGetPropertiesToParameterBlock
ResUtilVerifyResourceService
ResUtilEnumProperties
ResUtilSetDwordValue
ResUtilGetMultiSzProperty
ResUtilResourcesEqual
ResUtilSetPropertyParameterBlock
ResUtilVerifyPropertyTable
ResUtilDupString
ResUtilSetResourceServiceEnvironment

catsrvut

RegDBRestore
??0CComPlusInterface@@QAE@ABV0@@Z
DllRegisterServer
ManagedRequestW
??4CComPlusObject@@QAEAAV0@ABV0@@Z
SysprepComplus2
SysprepComplus
??4CComPlusTypelib@@QAEAAV0@ABV0@@Z
?GetITypeLib@CComPlusTypelib@@QAEPAUITypeLib@@XZ
??0CComPlusMethod@@QAE@ABV0@@Z
??_7CComPlusObject@@6B@
??1CComPlusComponent@@UAE@XZ
??_7CComPlusMethod@@6B@
QueryUserDllW
COMPlusUninstallActionW
WinlogonHandlePendingInfOperations
??4CComPlusInterface@@QAEAAV0@ABV0@@Z

rtm

MgmGetNextMfeStats
RtmGetLessSpecificDestination
RtmGetExactMatchDestination
MgmDeRegisterMProtocol
RtmDeleteRouteList
RtmGetRegisteredEntities
RtmReleaseNextHopInfo
RtmGetChangedDests
RtmGetEnumRoutes
RtmDequeueRouteChangeMessage
RtmMarkDestForChangeNotification
MgmGroupEnumerationEnd
DeleteFromTable
RtmRegisterForChangeNotification
RtmReleaseChangedDests
RtmCreateEnumerationHandle
MgmGroupEnumerationStart
RtmGetDestInfo
RtmGetNextRoute
RtmGetChangeStatus
MgmGroupEnumerationGetNext
RtmInvokeMethod
RtmDeleteNextHop
RtmDeleteRoute
RtmBlockMethods
RtmGetEntityMethods
MgmGetFirstMfeStats
RtmGetOpaqueInformationPointer

wshrm

WSHAddressToString
WSHGetWSAProtocolInfo
WSHSetSocketInformation
WSHEnumProtocols
WSHGetSocketInformation
WSHIoctl
WSHGetBroadcastSockaddr
WSHGetWildcardSockaddr
WSHGetProviderGuid
WSHNotify
WSHOpenSocket
WSHJoinLeaf
WSHStringToAddress
WSHOpenSocket2
WSHGetSockaddrType
WSHGetWinsockMapping

user32

EndDialog

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f936d2db662758de9f4d035b1dc7710

Headers

File Characteristics

Imports

msvcrt

kernel32

rasman

resutils

catsrvut

rtm

wshrm

user32

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 131KB - Virtual size: 131KB

.data Size: 51KB - Virtual size: 50KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 131KB - Virtual size: 131KB

.data
Size: 51KB - Virtual size: 50KB

.rsrc
Size: 6KB - Virtual size: 6KB