95842f6c0c99e753979fc0dc707b11d711c036d38558d9180b201a90f9d94301

Sharing

Copy URL

Twitter E-mail

General

Target

95842f6c0c99e753979fc0dc707b11d711c036d38558d9180b201a90f9d94301
Size

84KB
MD5

08c62e048d9a6ecf21255bedb7374d06
SHA1

2e926f4aaca2e211a753326ff4c0771abfa2a28f
SHA256

95842f6c0c99e753979fc0dc707b11d711c036d38558d9180b201a90f9d94301
SHA512

b11146e4b11b8c276f8d6f1d70626d7c134186b0c5b5468bf144e8c5b55be76566b224072fe59b925e388f992d3c8854efaf38abd5bd2daf613b1f72119c1914
SSDEEP

1536:v+TZymxEfMiDHk2iuRt4XZn3i6GjJgN54wGKdotS2mGW4g30:v+TZymxEPz4Zy6OJgXPdM2GWV

Score

N/A

Malware Config

Signatures

Files

95842f6c0c99e753979fc0dc707b11d711c036d38558d9180b201a90f9d94301
.exe windows x86

c9e3a2b11a6e02461d06cac3a114feb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_controlfp
__p__fmode
__p__commode
?terminate@@YAXXZ
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
??2@YAPAXI@Z
free
__CxxFrameHandler
malloc
wcscpy
wcstok
_iob
wcslen
_wtoi
_ltow
_wsetlocale
_wcsicmp
wcschr
_CxxThrowException
_c_exit
_exit
_XcptFilter
_cexit
??1type_info@@UAE@XZ
_except_handler3
exit
calloc
wcstod
wcstol
wcsncmp
_wcsnicmp
realloc
fflush
fprintf
strtok
wcsstr
_wcsnset
wcscat
_strnicmp
_stricmp
localtime
??3@YAXPAX@Z

kernel32

FileTimeToSystemTime
GetComputerNameExW
GetConsoleMode
SetConsoleMode
ReadFile
ReadConsoleW
MultiByteToWideChar
LoadLibraryW
FreeLibrary
lstrcpynW
WideCharToMultiByte
VerSetConditionMask
VerifyVersionInfoW
lstrlenW
lstrcmpiW
lstrcmpW
InterlockedIncrement
GetModuleHandleA
LocalFree
GetStdHandle
WriteConsoleW
FormatMessageW
LocalAlloc
SetLastError
GetNumberFormatW
InterlockedDecrement
CreateFileW
CreateFileMappingW
CloseHandle
MapViewOfFile
GetDateFormatW
GetTimeFormatW
lstrcatW
UnmapViewOfFile
GetUserDefaultLCID
GetLocaleInfoW
GetModuleHandleW
GetProcAddress
GetLastError
lstrcpyW

user32

LoadStringW
wsprintfW
CharUpperW

mpr

WNetAddConnection2W
WNetCancelConnection2W
WNetGetLastErrorW

ole32

CoTaskMemFree
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysAllocStringByteLen
VariantClear
VariantChangeType
VariantCopy
VariantInit
SysFreeString
SysStringLen
SysAllocString

framedyn

?Compare@CHString@@QBEHPBG@Z
?Format@CHString@@QAAXPBGZZ
?GetBufferSetLength@CHString@@QAEPAGH@Z
?ReleaseBuffer@CHString@@QAEXH@Z
??YCHString@@QAEABV0@PBG@Z
?Left@CHString@@QBE?AV1@H@Z
?FindOneOf@CHString@@QBEHPBG@Z
?Mid@CHString@@QBE?AV1@H@Z
??4CHString@@QAEABV0@ABV0@@Z
?Find@CHString@@QBEHG@Z
?GetBuffer@CHString@@QAEPAGH@Z
??0CHString@@QAE@PBG@Z
??0CHString@@QAE@XZ
??1CHString@@QAE@XZ
?GetData@CHString@@IBEPAUCHStringData@@XZ
??4CHString@@QAEABV0@PBG@Z

shlwapi

StrCmpNW

secur32

GetUserNameExW

ws2_32

gethostbyaddr
WSAGetLastError
inet_addr
WSACleanup
WSAStartup

netapi32

NetServerGetInfo
NetApiBufferFree

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ueflfeq
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c9e3a2b11a6e02461d06cac3a114feb5

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

mpr

ole32

oleaut32

framedyn

shlwapi

secur32

ws2_32

netapi32

Sections

.text Size: 44KB - Virtual size: 43KB

.data Size: 512B - Virtual size: 140B

.tls Size: 512B - Virtual size: 21B

.rsrc Size: 38KB - Virtual size: 39KB

ueflfeq Size: - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 43KB

.data
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 21B

.rsrc
Size: 38KB - Virtual size: 39KB

ueflfeq
Size: - Virtual size: 4KB