a7ff3ccac037d521f5a357a6b80af3c1a0199780e3f71c308a41ad054b086046

Sharing

Copy URL Twitter E-mail

General

Target

a7ff3ccac037d521f5a357a6b80af3c1a0199780e3f71c308a41ad054b086046
Size

870KB
MD5

7b6544afe214afb8fbb369b9edbb3ea0
SHA1

db9846789f29aa9811a119ff54eae16abf57e0ec
SHA256

a7ff3ccac037d521f5a357a6b80af3c1a0199780e3f71c308a41ad054b086046
SHA512

99cfc25d20cdad030082bb8cd60cd85f188ff5d1980fb2b69b745a81d307bbc26deb233d36d0eee726724d11ad135b6bab0ebc0e1e0799481120f258f86ee6e0
SSDEEP

12288:XbQrhN+7PuqQ0FIMMGvBUkCuh4Pfh8lqIIdcXZDpnH3oNotS:LQlNMPZQ0Ff68IItD/t

Score

N/A

Malware Config

Signatures

Files

a7ff3ccac037d521f5a357a6b80af3c1a0199780e3f71c308a41ad054b086046
.exe windows x86

7ead9dfaddc32e958d050518bac3e7ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
GetConsoleScreenBufferInfo
GlobalReAlloc
GetPrivateProfileSectionW
CompareStringW
ReadConsoleW
AssignProcessToJobObject
GetLogicalDrives
VirtualAlloc
InterlockedExchangeAdd
GetProcessAffinityMask
SetConsoleCursorPosition

winmm

mixerGetDevCapsA
waveInPrepareHeader
midiOutShortMsg
mmioSetInfo
waveOutGetVolume
midiOutReset

advapi32

RegOverridePredefKey
RegSetKeySecurity
LsaStorePrivateData
LsaSetInformationPolicy
RevertToSelf
GetKernelObjectSecurity
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
RegSaveKeyW
AddAccessAllowedAce
BuildTrusteeWithSidW
QueryServiceConfigA

cfgmgr32

CM_Reenumerate_DevNode
CM_Get_DevNode_Registry_PropertyW
CM_Open_DevNode_Key_Ex
CM_Get_Device_Interface_List_Size_ExW
CM_Get_Child
CM_Get_First_Log_Conf_Ex
CM_Get_Parent
CM_Get_Device_IDW

netapi32

NetWkstaUserGetInfo
NetDfsSetClientInfo
NetServiceControl
NetServerSetInfo
NetUnjoinDomain
DsEnumerateDomainTrustsW
NetRemoteTOD
DsRoleFreeMemory
NetMessageBufferSend
NetFileEnum

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 149KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 117KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 128KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 114KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 125KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ead9dfaddc32e958d050518bac3e7ea

Headers

File Characteristics

Imports

kernel32

winmm

advapi32

cfgmgr32

netapi32

Sections

.text Size: 50KB - Virtual size: 49KB

.itext Size: 149KB - Virtual size: 185KB

.data Size: 117KB - Virtual size: 157KB

.bss Size: 128KB - Virtual size: 200KB

.idata Size: 114KB - Virtual size: 194KB

.tls Size: 125KB - Virtual size: 207KB

.rdata Size: 44KB - Virtual size: 105KB

.rsrc Size: 140KB - Virtual size: 140KB

.reloc Size: 512B - Virtual size: 32B

.text
Size: 50KB - Virtual size: 49KB

.itext
Size: 149KB - Virtual size: 185KB

.data
Size: 117KB - Virtual size: 157KB

.bss
Size: 128KB - Virtual size: 200KB

.idata
Size: 114KB - Virtual size: 194KB

.tls
Size: 125KB - Virtual size: 207KB

.rdata
Size: 44KB - Virtual size: 105KB

.rsrc
Size: 140KB - Virtual size: 140KB

.reloc
Size: 512B - Virtual size: 32B