6858a5402ff1d70f41f2b0b338a5cd76bba2f895803650627754b8fc3109ccce

Sharing

Copy URL Twitter E-mail

General

Target

6858a5402ff1d70f41f2b0b338a5cd76bba2f895803650627754b8fc3109ccce
Size

264KB
MD5

813e1af68b2dc049dc162988c326ace3
SHA1

5a7edc3ccc1f1e2129a9ea3c1b6784f0783bfeb0
SHA256

6858a5402ff1d70f41f2b0b338a5cd76bba2f895803650627754b8fc3109ccce
SHA512

8e7db91fdad1a234ff8f83c6bd19d36db4370b048d86485939e188adc84056d9ca87f03ac78f717689f6ca4e87b64e912cb705ceaf1bb42a916e4ab1f0f00d9c
SSDEEP

6144:dtMge23QO4Idgdb9Ht0Nfwpv9nR0HZNhZNbZl79q3x:dtMge2GI4b1tkfwpFnOn

Score

N/A

Malware Config

Signatures

Files

6858a5402ff1d70f41f2b0b338a5cd76bba2f895803650627754b8fc3109ccce
.exe windows x86

5ff40aab85c4c853f038a211b89691d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CLSIDFromString
CoInitialize
OleInitialize
OleSetContainedObject

rasapi32

RasGetConnectStatusA
RasEnumConnectionsA
RasHangUpA

clusapi

CreateClusterNotifyPort
CloseCluster
CloseClusterGroup
CloseClusterNetInterface
CloseClusterNetwork
CloseClusterNode
CloseClusterNotifyPort
CloseClusterResource
ClusterCloseEnum
ClusterControl
SetClusterQuorumResource
SetClusterNetworkPriorityOrder
SetClusterNetworkName
SetClusterName
SetClusterGroupNodeList
SetClusterGroupName
ResumeClusterNode
RestoreClusterDatabase
OpenClusterResource
OpenClusterNode
OpenClusterNetwork
OpenClusterNetInterface
GetClusterNodeId
GetClusterNetworkState
GetClusterNetworkKey
GetClusterNetworkId
GetClusterNetInterfaceState
GetClusterNetInterfaceKey
DeleteClusterGroup
CreateClusterResourceType
CreateClusterResource
CreateClusterGroup
ClusterRegQueryValue
ClusterRegQueryInfoKey
ClusterRegOpenKey
ClusterRegGetKeySecurity
ClusterRegEnumValue
ClusterRegEnumKey
ClusterRegDeleteValue
ClusterNetworkGetEnumCount
ClusterNetworkEnum
ClusterNetworkControl
ClusterNetworkCloseEnum
ClusterNetInterfaceControl
ClusterGroupOpenEnum
ClusterGroupGetEnumCount
ClusterGroupEnum
ClusterGroupControl
ClusterGroupCloseEnum
ClusterGetEnumCount
ClusterEnum

kernel32

EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetSystemInfo
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleHandleA
SetTapePosition
VirtualProtect
AddAtomA
LoadLibraryExA
GetNativeSystemInfo
ExpandEnvironmentStringsA
GetDriveTypeA
GetVolumeInformationA
GetCommandLineA
GetVersionExA
HeapAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5ff40aab85c4c853f038a211b89691d1

Headers

File Characteristics

Imports

ole32

rasapi32

clusapi

kernel32

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 88KB - Virtual size: 377KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 88KB - Virtual size: 377KB