a1529869039bfcdb21f47abc7b9ebe76948bbffa5b253983b33d95688c7503d6

General

Target

a1529869039bfcdb21f47abc7b9ebe76948bbffa5b253983b33d95688c7503d6
Size

816KB
MD5

823e4424a0d7654a226bd4d9b2f79990
SHA1

220a768a4618c0a0d5754290a8f67368bded64d0
SHA256

a1529869039bfcdb21f47abc7b9ebe76948bbffa5b253983b33d95688c7503d6
SHA512

df4fd91977f86a98e9aa5480ab55a39bd9b0d59139ac6b6d8df4849ecda36651a6ac106dde9ca2cc49f6cc66cf67f8431da83b68d0b019f6362b33a4946b563e
SSDEEP

12288:fFey/RIqV24ExFh8uEh6n+DYs5+fVn9ocMBDJaLaz0oAcIPwqaV:TR/sd2uEo9fVnScEt/AcIja

Score

N/A

Malware Config

Signatures

Files

a1529869039bfcdb21f47abc7b9ebe76948bbffa5b253983b33d95688c7503d6
.exe windows x86

9650b4d56910f87196d74f5b86aef6a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

imagehlp

BindImage

rtm

BestMatchInTable
CheckTable
CreateTable
DeleteFromTable
DestroyTable
DumpTable
EnumOverTable
InsertIntoTable
MgmAddGroupMembershipEntry
MgmDeInitialize
MgmDeRegisterMProtocol
MgmDeleteGroupMembershipEntry
MgmGetFirstMfe
MgmGetFirstMfeStats
MgmGetMfe
MgmGetMfeStats
MgmGetNextMfe
MgmGetNextMfeStats
MgmGetProtocolOnInterface
MgmGroupEnumerationEnd
MgmGroupEnumerationGetNext
MgmGroupEnumerationStart
MgmInitialize
MgmRegisterMProtocol
MgmReleaseInterfaceOwnership
MgmTakeInterfaceOwnership
NextMatchInTable
RtmAddNextHop
RtmBlockConvertRoutesToStatic
RtmBlockConvertRoutesToStatic
RtmBlockConvertRoutesToStatic

kernel32

SetConsoleCP
GetTickCount
GetWindowsDirectoryW
GetThreadContext
IsBadCodePtr
OpenEventW
GetSystemTime
SetConsoleCursor
MulDiv
GetTempPathA
CreateFileA
GetTempPathW

regapi

RegBuildNumberQuery
RegCdCreateA
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA

lz32

LZRead

iedkcs32

BrandCleanInstallStubs
BrandCleanInstallStubs
BrandCleanInstallStubs
BrandCleanInstallStubs
BrandCleanInstallStubs
BrandCleanInstallStubs
BrandCleanInstallStubs
BrandCleanInstallStubs

Sections

.text
Size: 28KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 758KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.neolit
Size: 5KB - Virtual size: 8KB

Sharing

General

Malware Config

Signatures

Files

9650b4d56910f87196d74f5b86aef6a7

Headers

File Characteristics

Imports

imagehlp

rtm

kernel32

regapi

lz32

iedkcs32

Sections

.text Size: 28KB - Virtual size: 35KB

.data Size: 13KB - Virtual size: 14KB

.rsrc Size: 758KB - Virtual size: 760KB

.neolit Size: 5KB - Virtual size: 8KB

.text
Size: 28KB - Virtual size: 35KB

.data
Size: 13KB - Virtual size: 14KB

.rsrc
Size: 758KB - Virtual size: 760KB

.neolit
Size: 5KB - Virtual size: 8KB