be47d127fef40c7113a6c743724d33e54a2b74092f4ffac780f88e1586f359c8

Sharing

Copy URL

Twitter E-mail

General

Target

be47d127fef40c7113a6c743724d33e54a2b74092f4ffac780f88e1586f359c8
Size

184KB
MD5

710de6edd8584c15241bdaf4f1ff2e4e
SHA1

daf9c4f009ad39d20beba93b2f691d3245be589b
SHA256

be47d127fef40c7113a6c743724d33e54a2b74092f4ffac780f88e1586f359c8
SHA512

ec2a0a8d87477aeb5b708a08628270e4bc4fe41a0f267eb990155cc749e9d71344d5a6190f20e1e615b4b2024c2ae48c85c491f7d332b7b271a83e7c244285ff
SSDEEP

3072:q4oC0QO4BWG8iHurzLzXdqsrXI1s08LbF2JUG9iTgt23UCIG0:qMpO4cG8GurnRqv1s00J1GcVE/G

Score

N/A

Malware Config

Signatures

Files

be47d127fef40c7113a6c743724d33e54a2b74092f4ffac780f88e1586f359c8
.exe windows x86

e542687e83dd023ea1f86911021b2d4e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
CreateDialogIndirectParamA
GetForegroundWindow
DispatchMessageA
GetSysColorBrush
CreatePopupMenu
GetClientRect
DialogBoxIndirectParamA

ole32

CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc

advapi32

GetUserNameA

ntdsapi

DsAddSidHistoryA
DsBindA
DsBindWithCredA
DsBindWithSpnA
DsClientMakeSpnForTargetServerA
DsCrackNamesA
DsCrackSpnA
DsCrackUnquotedMangledRdnA
DsFreeDomainControllerInfoA
DsFreeNameResultA
DsFreePasswordCredentials
DsFreeSchemaGuidMapA
DsFreeSpnArrayA
DsGetDomainControllerInfoA
DsGetSpnA
DsInheritSecurityIdentityA
DsIsMangledDnA
DsIsMangledRdnValueA
DsMapSchemaGuidsA
DsQuoteRdnValueA
DsRemoveDsDomainA
DsRemoveDsServerA
DsReplicaAddA
DsReplicaConsistencyCheck
DsReplicaDelA
DsReplicaFreeInfo
DsReplicaModifyA
DsReplicaSyncAllA
DsReplicaSyncA

kernel32

MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
HeapReAlloc
RtlUnwind
HeapSize
GetStringTypeW
GetOEMCP
GetACP
GetCPInfo
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
IsValidCodePage
GetModuleHandleA
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
HeapDestroy
HeapCreate
GetModuleFileNameW
GetStdHandle
WriteFile
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
EncodePointer
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProfileStringW
VirtualProtect
AddConsoleAliasA
BeginUpdateResourceA
GetNativeSystemInfo
GetDriveTypeA
GetVolumeInformationA
GetCurrentThread
DuplicateHandle
PeekNamedPipe
GetExitCodeProcess
GetEnvironmentVariableA
ResetEvent
FindFirstChangeNotificationA
DeleteFileA
OpenMutexA
CreateMutexA
FlushFileBuffers
LocalFree
LocalAlloc
InitializeCriticalSection
EnterCriticalSection
FindClose
FindNextFileA
FindFirstFileA
TlsAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e542687e83dd023ea1f86911021b2d4e

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

advapi32

ntdsapi

kernel32

Sections

.text Size: 42KB - Virtual size: 42KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 74KB - Virtual size: 173KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 74KB - Virtual size: 173KB

.rsrc
Size: 2KB - Virtual size: 1KB