4facf8ecf7a634041aab3295b65f3635d816e8a3e7cd8e10e5170671c1c50fb7

Sharing

Copy URL Twitter E-mail

General

Target

4facf8ecf7a634041aab3295b65f3635d816e8a3e7cd8e10e5170671c1c50fb7
Size

54KB
MD5

a106122a34abdf380b43235f70867200
SHA1

8d8641924273d1e03a78d6cc67fee9eb8cc3c07a
SHA256

4facf8ecf7a634041aab3295b65f3635d816e8a3e7cd8e10e5170671c1c50fb7
SHA512

9382aaa5c0f7a5039effafbdf78b7b7aa613c3966be0ccd5ecd1799b63bc856ca722a41d94eba3d0e4ff3255931aed64b2369816696b8443019144a82bdd78cc
SSDEEP

1536:4FJa6E+eQYUKuhM8MOSCTRy7B+Q/ac+THp7TnUFq/D:vwAuK8Djy7sQ/adTld

Score

N/A

Malware Config

Signatures

Files

4facf8ecf7a634041aab3295b65f3635d816e8a3e7cd8e10e5170671c1c50fb7
.exe windows x86

5db2a9934a557d459d8fd48e1fe8c58b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CreateMailslotW
CloseHandle
WriteFile
CreateFileW
GetComputerNameW
HeapSetInformation
GetModuleFileNameW
GetComputerNameExW
ExitProcess
SetConsoleMode
WriteConsoleW
ReadConsoleW
HeapReAlloc
HeapFree
HeapSize
HeapAlloc
GetProcessHeap
HeapValidate
MultiByteToWideChar
CompareStringA
SetLastError
CompareStringW
lstrlenW
lstrlenA
GetFileType
GetStdHandle
GetConsoleMode
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
GetTickCount
QueryPerformanceCounter
VerSetConditionMask
VerifyVersionInfoW
FormatMessageW
LocalFree
SetThreadUILanguage
UnhandledExceptionFilter
GetCurrentProcess
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetConsoleOutputCP
WideCharToMultiByte
GetThreadLocale
GetLastError

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
__CxxFrameHandler3
memset
_iob
_vsnwprintf
_memicmp
_get_osfhandle
_errno
_fileno
wcstod
wcstoul
wcstol
fflush
fprintf
__iob_func
wcstok

user32

CharUpperW
LoadStringW

netapi32

NetApiBufferFree
NetServerGetInfo

ws2_32

WSAStartup
WSAGetLastError
GetAddrInfoW
GetNameInfoW
FreeAddrInfoW
WSACleanup

shlwapi

StrChrW
StrStrW
StrChrIW
StrStrIW

mpr

WNetAddConnection2W
WNetCancelConnection2W
WNetGetLastErrorW

secur32

GetUserNameExW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5db2a9934a557d459d8fd48e1fe8c58b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

netapi32

ws2_32

shlwapi

mpr

secur32

version

Sections

.text Size: 28KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 28KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 22KB - Virtual size: 22KB