fa5f704afd5ab78c89f2d1adeb2b357833bd9195a1607fc4565befa353db420a

General

Target

fa5f704afd5ab78c89f2d1adeb2b357833bd9195a1607fc4565befa353db420a
Size

104KB
MD5

749355850e543a5614bc6c82c197df80
SHA1

ae7451f74205a707232a8eff1ec8b65a1a563a9f
SHA256

fa5f704afd5ab78c89f2d1adeb2b357833bd9195a1607fc4565befa353db420a
SHA512

71a1f06b16dd722d9863301fa45f37698518de42157c2611a22457fe86e499cb8bd9b0e25fb20173a9a1f594eecd8a526a85d67f632eae050ece42124689a6aa
SSDEEP

768:1M6mhfz0ZF4hC0wIuNgJ6oQQBTn14SyfGF35EYr+:1OeLh0oNgBQYb143fGF3eYr

Score

N/A

Malware Config

Signatures

Files

fa5f704afd5ab78c89f2d1adeb2b357833bd9195a1607fc4565befa353db420a
.exe windows x86

fb131abc7162b8a5fa451b954767ec54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

untfs

Extend
Format
Recover

kernel32

GetNumberFormatA
InterlockedDecrement
InterlockedExchange
GetCurrentThreadId
CompareStringA
CreateNamedPipeW
FormatMessageA
GetCurrentDirectoryA
VirtualQuery
WriteProcessMemory
GetProcessHeap
GetCurrentProcess
GetPrivateProfileIntA
GetDiskFreeSpaceA
GetComputerNameA
SetLastError
CreateDirectoryA
ExpandEnvironmentStringsA
SleepEx
SystemTimeToFileTime
GetConsoleAliasW
CopyFileA
CreateEventA
LoadLibraryA
GetTimeFormatA
GetFullPathNameA
CreateMutexA
HeapCreate

authz

AuthzFreeAuditEvent
AuthzFreeResourceManager
AuthzFreeContext
AuthzInitializeContextFromSid
AuthzAddSidsToContext

dbnmpntw

ConnectionWrite
ConnectionError
ConnectionVer
ConnectionClose
ConnectionRead

user32

DialogBoxParamW
IsZoomed
IsWindow
GetWindowLongA
GetCaretPos
CharToOemA
LoadImageW
DispatchMessageA
PeekMessageA
GetMessageA
SetCursorPos
IsDialogMessageA
DrawIcon
LoadCursorA
GetWindowTextA
PostMessageA
SetFocus

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb131abc7162b8a5fa451b954767ec54

Headers

File Characteristics

Imports

untfs

kernel32

authz

dbnmpntw

user32

Sections

.text Size: 56KB - Virtual size: 54KB

.data Size: 20KB - Virtual size: 16KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 56KB - Virtual size: 54KB

.data
Size: 20KB - Virtual size: 16KB

.rsrc
Size: 24KB - Virtual size: 21KB