d2582d05dc0f770c13cbb36abf6dededd79ec92fd08d958ae124069491252602

General

Target

d2582d05dc0f770c13cbb36abf6dededd79ec92fd08d958ae124069491252602
Size

208KB
MD5

c64a2e9aeea847d8135aa55a4112405f
SHA1

3a72f4bca584a73f1abd5ac9422b1369dfd0d049
SHA256

d2582d05dc0f770c13cbb36abf6dededd79ec92fd08d958ae124069491252602
SHA512

eacb2449c71fa232201512184dc0aba27da40c966155a819da0ceeff561253f83410f82e28725b76b983cbf9ee48e36468f0c3a216cd22c213dc3010a190a4a1
SSDEEP

3072:P3pRmF4qOF04PkWYmsMtiL76PerRhOs7dEMjIV89ozBzy0LymWqml9ViPzOdk5au:P32F4yssy/WtMMjIzBy4WqH6kh

Score

N/A

Malware Config

Signatures

Files

d2582d05dc0f770c13cbb36abf6dededd79ec92fd08d958ae124069491252602
.exe windows x86

e8a99fc532414ae756ce08b45dd4f636

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegReplaceKeyA
LsaRetrievePrivateData
RegRestoreKeyA
RegNotifyChangeKeyValue
RegLoadKeyA
ObjectOpenAuditAlarmA
GetOldestEventLogRecord
ObjectDeleteAuditAlarmA
RegQueryInfoKeyA
AccessCheck
LsaEnumerateAccountRights
LsaQueryInformationPolicy

kernel32

FlushViewOfFile
CreateMutexA
ClearCommBreak
GlobalSize
FatalExit
EnumCalendarInfoW
FindResourceW
CallNamedPipeA
CloseHandle
EnumDateFormatsA
GetModuleHandleA
GetStartupInfoA

msvcrt

_open
_controlfp
_exit
__p__fmode
__p__commode
_adjust_fdiv
__set_app_type
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_c_exit

user32

DdeQueryStringA
GetClipCursor
ToUnicodeEx
GetActiveWindow
BlockInput
GetClipboardFormatNameA
SubtractRect
EmptyClipboard
GetKeyboardLayout
DdeCreateDataHandle
DdeQueryNextServer
CharLowerA
GetDlgItemInt
GetForegroundWindow
IsClipboardFormatAvailable
SetKeyboardState
ChangeDisplaySettingsExA
GetKeyState
GetProcessWindowStation
GetOpenClipboardWindow
LoadStringA
OpenInputDesktop
CharPrevA
BeginDeferWindowPos
GetKBCodePage

version

GetFileVersionInfoW

rasapi32

RasGetEntryPropertiesA
RasEditPhonebookEntryW
RasGetConnectStatusW
RasSetEntryDialParamsA
RasDialW
RasDialA

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8a99fc532414ae756ce08b45dd4f636

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

version

rasapi32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 160KB - Virtual size: 3.0MB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 160KB - Virtual size: 3.0MB

.rsrc
Size: 12KB - Virtual size: 8KB