90739bf4a05aba53865a4c477e37b78e53a4610ae6b5605f280b8f27276ee5b3

General

Target

90739bf4a05aba53865a4c477e37b78e53a4610ae6b5605f280b8f27276ee5b3
Size

92KB
MD5

8246e2f1e8e938999f618751583bc320
SHA1

ae9358d2133a257091a895a512083fea39d96fc0
SHA256

90739bf4a05aba53865a4c477e37b78e53a4610ae6b5605f280b8f27276ee5b3
SHA512

30a47c47a78f3234c65969b8b829866653bb204d297d968abcc76e51345c738c16f2d22f4182e2502c7ca16573e4579b04d25fef04df216e8037f2cc9e1dc164
SSDEEP

1536:apkmYgdoDPEQqkA+vOOkLXOjy6Fl+ejVdKTpkLfHpyJowOKpP6ucT:apID8gAKkL+yql+szKTpOfHIJoyRs

Score

N/A

Malware Config

Signatures

Files

90739bf4a05aba53865a4c477e37b78e53a4610ae6b5605f280b8f27276ee5b3
.exe windows x86

bde79800a220007a9c066cb92b050e44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetFileTime
GetSystemTime
_lclose
QueryPerformanceCounter
GetFullPathNameA
GetVolumeNameForVolumeMountPointA
FreeConsole
VirtualAllocEx
SetConsoleCursorMode
GetConsoleCommandHistoryLengthW
OpenWaitableTimerA
ExitVDM
GetCommMask
DisableThreadLibraryCalls

odbc32

SQLCancel

crypt32

CertFreeCRLContext

dhcpcsvc

DhcpUndoRequestParams

user32

AdjustWindowRectEx
SendMessageTimeoutA
SendNotifyMessageA
GetMenuItemID
RealGetWindowClassA
EnumDisplaySettingsA
EnableWindow
ShowOwnedPopups
LoadBitmapA
ShowStartGlass
CreateDesktopA
CreateWindowExA
IsServerSideWindow

advapi32

AddAce
GetAce

authz

AuthzOpenObjectAudit

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rtttwod
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bde79800a220007a9c066cb92b050e44

Headers

File Characteristics

Imports

kernel32

odbc32

crypt32

dhcpcsvc

user32

advapi32

authz

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 21KB - Virtual size: 130KB

.data Size: 1024B - Virtual size: 640B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 25KB - Virtual size: 25KB

rtttwod Size: 4KB - Virtual size: 80KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 21KB - Virtual size: 130KB

.data
Size: 1024B - Virtual size: 640B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 25KB - Virtual size: 25KB

rtttwod
Size: 4KB - Virtual size: 80KB