33b1e1a0b56bdbaaa36f8972c038c3cdb985d5438964621689e6edaa18e15e3b

General

Target

33b1e1a0b56bdbaaa36f8972c038c3cdb985d5438964621689e6edaa18e15e3b
Size

948KB
MD5

21a60253ff2f86a299feadfd2bdcaaf0
SHA1

733cf2cb4bae85f2ec6cf303bc7eb0823e917bfd
SHA256

33b1e1a0b56bdbaaa36f8972c038c3cdb985d5438964621689e6edaa18e15e3b
SHA512

bd49b7db465aea7ca685e183367bdb30b61574ae30003923804d60e12fc108dc337721e04a6281524d5506a9ac0699c23baf54071e43a29e34304d7bc8556abe
SSDEEP

24576:JM7A0G7ApHHprhQxzft4EG0cAAnYp73kntbbDwC:JyyG0knYSPDw

Score

N/A

Malware Config

Signatures

Files

33b1e1a0b56bdbaaa36f8972c038c3cdb985d5438964621689e6edaa18e15e3b
.exe windows x86

6f7e99564e79ff2f0731cf61411f560f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

WmiOpenBlock
SetFileSecurityW
CreatePrivateObjectSecurity
RegSetValueExW
CryptSetKeyParam
RegConnectRegistryA
RegNotifyChangeKeyValue

tapi32

lineInitializeExW
lineGetDevConfigA
tapiGetLocationInfoW
lineInitialize
lineMakeCall
lineGetCountry

userenv

GetProfileType
GetUserProfileDirectoryW
GetAllUsersProfileDirectoryW
DestroyEnvironmentBlock

kernel32

BeginUpdateResourceW
OpenJobObjectA
VirtualAlloc
SetCommState
WriteProcessMemory
GlobalAlloc
FindNextVolumeW
BackupWrite
GetSystemWindowsDirectoryA
GetCommandLineA

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 311KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 295KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 148KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f7e99564e79ff2f0731cf61411f560f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

tapi32

userenv

kernel32

Sections

.text Size: 151KB - Virtual size: 151KB

.rdata Size: 311KB - Virtual size: 526KB

.data Size: 295KB - Virtual size: 433KB

.edata Size: 148KB - Virtual size: 189KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 151KB - Virtual size: 151KB

.rdata
Size: 311KB - Virtual size: 526KB

.data
Size: 295KB - Virtual size: 433KB

.edata
Size: 148KB - Virtual size: 189KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 2KB - Virtual size: 2KB