f90d672af9736bc66b878ff373b09964e9f69783af3356b42ac533358da1b8e5

Sharing

Copy URL Twitter E-mail

General

Target

f90d672af9736bc66b878ff373b09964e9f69783af3356b42ac533358da1b8e5
Size

259KB
MD5

92b140117e214a6c020e152f33c576e0
SHA1

4d53e488c87c0bf3d19afc91bdf9f4a6e6a12124
SHA256

f90d672af9736bc66b878ff373b09964e9f69783af3356b42ac533358da1b8e5
SHA512

cccb697c64a66a8a2f5fc759f6e8218fdd2d9c71ef43556e0dcfdb22376e2b63e853ec3d912887113ddc3dd1c86b1bebcb8c6f269c8f7181b18867204ac98702
SSDEEP

3072:NEFvVSH94a2v8ry4FzyfOt+GIigVNkBYofHf5YMeKUvAPQVEolUAXBr4JKrSFb:NEF+1h+c+rdkBffRYMepIPn0Uo4II

Score

N/A

Malware Config

Signatures

Files

f90d672af9736bc66b878ff373b09964e9f69783af3356b42ac533358da1b8e5
.exe windows x64

39e9b54b70ddb128cf3948d24dc2e561

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetConsoleOutputCP
FormatMessageW
LoadLibraryA
GetProcAddress
SetThreadPreferredUILanguages
GetSystemDirectoryA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
Sleep
LocalFree
GetLastError
HeapSetInformation

msvcrt

?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_cexit
_exit
_XcptFilter
__C_specific_handler
__getmainargs
exit
isxdigit
islower
fprintf
_iob
time
_fileno
_setmode
_wsetlocale
toupper
isdigit
_vsnprintf
_vsnwprintf
isspace
sscanf
memcpy

snmpapi

SnmpUtilMemAlloc
SnmpUtilMemFree
SnmpUtilVarBindFree
SnmpUtilOidCpy

ws2_32

gethostbyname
ntohl
inet_addr
WSAStartup

ntdll

RtlIpv4AddressToStringW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

advapi32

AllocateAndInitializeSid
CheckTokenMembership
FreeSid

iphlpapi

GetIpForwardTable
GetIpStatisticsEx
GetTcpStatisticsEx
GetIcmpStatisticsEx
GetUdpStatisticsEx

user32

CharToOemBuffW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 236KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39e9b54b70ddb128cf3948d24dc2e561

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

snmpapi

ws2_32

ntdll

advapi32

iphlpapi

user32

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 512B - Virtual size: 396B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 236KB - Virtual size: 460KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 512B - Virtual size: 396B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 236KB - Virtual size: 460KB