a290255415358fad2cd114da6f1ee84885d531831800969c0b5c47f62152f78a

Sharing

Copy URL Twitter E-mail

General

Target

a290255415358fad2cd114da6f1ee84885d531831800969c0b5c47f62152f78a
Size

284KB
MD5

a119af04dc9ba798b411e49eb3220670
SHA1

08c2310c85c2a1dd851b9bc9c0068149add5ce8e
SHA256

a290255415358fad2cd114da6f1ee84885d531831800969c0b5c47f62152f78a
SHA512

eebe2d9d6a8db2c09340e8459a544f5ce2f9c41b060d77618772f9809cf899b86d2c14ebbab65fdab03142a63b09d6136b729476bae4ed7fa776ff6ea9d3c2f7
SSDEEP

6144:OcJtO61uXuay3FfcveSqjtsgPxLKNvT0VpTjAGdmzBVkvsEkmJGqxmygIqnBvfGw:NJtO61u+poctFLKBT0fwGvdksGqxKSzk

Score

N/A

Malware Config

Signatures

Files

a290255415358fad2cd114da6f1ee84885d531831800969c0b5c47f62152f78a
.exe windows x86

92b0f1b5b4d8f6d7891c110ece44af08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeEnvironmentStringsW
ReplaceFileW
WritePrivateProfileStringW
FindFirstFileExW
SetConsoleWindowInfo
GlobalAlloc
GetVersionExA
GetStartupInfoW
WriteConsoleA
LoadLibraryW
GetOverlappedResult
CreateTimerQueue
ReadConsoleW
ReadConsoleOutputW
NlsGetCacheUpdateCount
HeapQueryInformation
lstrcpynA
EnumResourceNamesW
ReadConsoleInputExW
GetComputerNameExA
SetClientTimeZoneInformation
GetVolumePathNameA
ReadConsoleInputW
BuildCommDCBA
GetCalendarInfoA
ReadConsoleInputExA
SetTimerQueueTimer
EnumDateFormatsA
SetCommBreak
HeapReAlloc
FindNextVolumeMountPointW
RegisterWowExec
ContinueDebugEvent
GetConsoleScreenBufferInfo
GetModuleHandleW
GlobalCompact
ScrollConsoleScreenBufferW
FlushInstructionCache
GetVolumeInformationW

linkinfo

CompareLinkInfoReferents
CompareLinkInfoVolumes
IsValidLinkInfo
GetCanonicalPathInfoA
GetLinkInfoData
GetCanonicalPathInfo
CreateLinkInfo
CreateLinkInfoW
ResolveLinkInfo
CreateLinkInfoA
ResolveLinkInfoW
ResolveLinkInfoA
DestroyLinkInfo
GetCanonicalPathInfoW
DisconnectLinkInfo

crtdll

_ismbcl1
_vsnwprintf
_spawnl
_clearfp
iswcntrl
tan
_strerror
_flsbuf
_lfind
vfwprintf
iswalpha
_CIasin

certcli

CAGetCAFlags
CARemoveCACertificateType
CAGetCACertificate
CAOIDCreateNew
CAGetCertTypePropertyEx
CAIsCertTypeCurrent
CAOIDFreeLdapURL
CAGetCASecurity
CASetCACertificate
CAAccessCheckEx
CAGetCAExpiration

clusapi

ClusterNodeControl
SetClusterQuorumResource
MoveClusterGroup
CreateClusterResourceType
RemoveClusterResourceNode
ClusterResourceCloseEnum
ClusterResourceTypeOpenEnum
ClusterCloseEnum
GetClusterNodeId
DeleteClusterResource
ClusterRegQueryInfoKey
SetClusterNetworkPriorityOrder
GetClusterNetworkId
CreateClusterGroup
OpenClusterNode
ClusterNetworkOpenEnum
AddClusterResourceDependency
RestoreClusterDatabase

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92b0f1b5b4d8f6d7891c110ece44af08

Headers

File Characteristics

Imports

kernel32

linkinfo

crtdll

certcli

clusapi

Sections

.text Size: 178KB - Virtual size: 177KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 73KB - Virtual size: 72KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 178KB - Virtual size: 177KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 73KB - Virtual size: 72KB

.rsrc
Size: 1KB - Virtual size: 1KB