46ae77476f577cd69309de4e950b150463bb248754d2b367ce1d8347c7248fcd

Sharing

Copy URL Twitter E-mail

General

Target

46ae77476f577cd69309de4e950b150463bb248754d2b367ce1d8347c7248fcd
Size

128KB
MD5

a224dffa85d9a930e668fae7396b1b80
SHA1

eb1d58c02d8d4df3d656f46918e0b79ec168dbad
SHA256

46ae77476f577cd69309de4e950b150463bb248754d2b367ce1d8347c7248fcd
SHA512

f203df3320ec08e89582258d21806bfc6241cdf21c8274bffdc18b075a291414e65d5499d540c89efe66cfdd1f67fb821fd00a197070d3329bc74e8bd6275d3d
SSDEEP

1536:q7zDpT+4Eaxj8TJTUeBd5KNLoTdkOe3i6ofBa6od0rXXNov0wmX7wYj0D39dPZsE:KzcX24TdUqzAsTdZco6MGvV4qr9E3d6H

Score

N/A

Malware Config

Signatures

Files

46ae77476f577cd69309de4e950b150463bb248754d2b367ce1d8347c7248fcd
.exe windows x86

9de09f06b813e6fd43a42af066bd4a44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

BindMoniker
CreateClassMoniker
OleCreateLinkToFileEx
OleDoAutoConvert
CreateDataAdviseHolder
OleSetAutoConvert
PropVariantCopy
OleCreateLink
OleRegGetMiscStatus
StgIsStorageILockBytes
OleCreateEx
OleSetContainedObject
CoTaskMemRealloc
CoUnmarshalInterface

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA

secur32

FreeCredentialsHandle
EncryptMessage
MakeSignature

ws2_32

bind
recvfrom
getprotobynumber
gethostname
socket
sendto
accept
htons
ioctlsocket
inet_addr
getprotobyname
connect
getsockopt

ntdsapi

DsReplicaVerifyObjectsW

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9de09f06b813e6fd43a42af066bd4a44

Headers

File Characteristics

Imports

ole32

kernel32

secur32

ws2_32

ntdsapi

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 19KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 51KB - Virtual size: 50KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 19KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 51KB - Virtual size: 50KB