607bf193c65128d89b0c10caac6fd83353384971bc73634c8b12b04b8afd3f34

Sharing

Copy URL

Twitter E-mail

General

Target

607bf193c65128d89b0c10caac6fd83353384971bc73634c8b12b04b8afd3f34
Size

680KB
MD5

3b7b688c955d71b28d5dce01acc4de50
SHA1

5d65dc20984022b7c44536c8de2af9b2e075892a
SHA256

607bf193c65128d89b0c10caac6fd83353384971bc73634c8b12b04b8afd3f34
SHA512

c2474d6b235b9806e76a39fc5e9e08c3e347ae199029d331c2f39e189d09f4e2e5271a16a10be2ceed8051a5f58c2b4126202e82bfee8ffc0b24c1b76889aece
SSDEEP

12288:Ikl/0NL/loV1CvRWReF2DdFgToK4io7QCatYyWCQ6KHm:7tKloQRWReF2vZLi55c

Score

N/A

Malware Config

Signatures

Files

607bf193c65128d89b0c10caac6fd83353384971bc73634c8b12b04b8afd3f34
.exe windows x86

d460aa26d3a5c02d26bd4a83e4331b48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dhcpcsvc

DhcpCApiCleanup
DhcpRegisterParamChange
DhcpCApiInitialize
DhcpDeRegisterParamChange
DhcpRequestParams
DhcpRemoveDNSRegistrations
DhcpUndoRequestParams

kernel32

GetSystemDefaultLangID
HeapReAlloc
CreateFileA
HeapAlloc
GetCurrentProcess
HeapFree
HeapValidate
VirtualProtectEx
PrepareTape
GetLocalTime
LoadLibraryA
OpenMutexA
CloseHandle
GetLastError
GetFileType
SetFileAttributesA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
SetEndOfFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
DeleteCriticalSection
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetProcAddress
TerminateProcess
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

Sections

.text
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d460aa26d3a5c02d26bd4a83e4331b48

Headers

File Characteristics

Imports

dhcpcsvc

kernel32

Sections

.text Size: 325KB - Virtual size: 325KB

.rdata Size: 208KB - Virtual size: 208KB

.data Size: 123KB - Virtual size: 221KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 325KB - Virtual size: 325KB

.rdata
Size: 208KB - Virtual size: 208KB

.data
Size: 123KB - Virtual size: 221KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 5KB - Virtual size: 5KB