ffe775ab2526e20d39b0a91cfaf9c413367680e43cd9864cd483e3e453d1c7a2

Sharing

Copy URL Twitter E-mail

General

Target

ffe775ab2526e20d39b0a91cfaf9c413367680e43cd9864cd483e3e453d1c7a2
Size

429KB
MD5

966cea004338f5b025d42434a6bbc360
SHA1

bb05ec886ea05e368ba25da7b25c2fa265920050
SHA256

ffe775ab2526e20d39b0a91cfaf9c413367680e43cd9864cd483e3e453d1c7a2
SHA512

a76bf10c0b5598938e695bed07b9854435108cbb8971933aeac6c9c8c720f1fc72895cf5bcbbeac4f446ad0e3ca5e020944f26ff5ab03259fd9884222d68423a
SSDEEP

6144:sfMair5+S5l70DpD567io6KRAE9VRbSoriYewmsf8qoNpvLk:sMB9+S5t0D3YHdVTo/vLk

Score

N/A

Malware Config

Signatures

Files

ffe775ab2526e20d39b0a91cfaf9c413367680e43cd9864cd483e3e453d1c7a2
.exe windows x86

4416c0cf1ea9b561a3393191c594484e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessagePos
UpdateWindow
GetClassNameW
GetDC
GetAsyncKeyState
EnumChildWindows
SetWindowPos
GetWindowTextW
FindWindowW
MapWindowPoints
GetSystemMetrics
DestroyMenu
BeginPaint
EmptyClipboard
InvalidateRect
PostMessageW
ValidateRect

mprapi

MprAdminDeviceEnum
MprAdminGetErrorString
MprAdminInterfaceEnum
MprAdminInterfaceGetCredentials
MprAdminInterfaceGetCredentialsEx
MprAdminInterfaceGetHandle
MprConfigServerRefresh
MprConfigServerRestore
MprConfigTransportCreate
MprConfigTransportDelete
MprConfigTransportEnum
MprConfigTransportGetHandle
MprInfoCreate
MprInfoDelete
MprInfoDuplicate

kernel32

VirtualProtect
GetOEMCP
GetACP
GetSystemInfo
GetCPInfo
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStringTypeW
GetStringTypeA
VirtualQuery
InterlockedExchange
RtlUnwind
LoadLibraryA
IsBadWritePtr
HeapReAlloc
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
GetVolumeInformationW
CreatePipe
GlobalFree
GlobalAlloc
GetLocaleInfoW
GlobalLock
MoveFileExW
GetCurrentProcessId
GetFileTime
FindCloseChangeNotification
FindNextChangeNotification
FindFirstChangeNotificationW
InitializeCriticalSection
EnterCriticalSection
CreateDirectoryW
CopyFileW
ResetEvent
VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryW
SetTapeParameters
GetModuleHandleA
GetVersionExA
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4416c0cf1ea9b561a3393191c594484e

Headers

File Characteristics

Imports

user32

mprapi

kernel32

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 188KB - Virtual size: 187KB

.data Size: 112KB - Virtual size: 130KB

.idata Size: 75KB - Virtual size: 74KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 188KB - Virtual size: 187KB

.data
Size: 112KB - Virtual size: 130KB

.idata
Size: 75KB - Virtual size: 74KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 5KB - Virtual size: 4KB