fbdb5ef583e5fbd30f29786aa27beb5797a6871deb0529ef3e989bc38f550daf

Sharing

Copy URL Twitter E-mail

General

Target

fbdb5ef583e5fbd30f29786aa27beb5797a6871deb0529ef3e989bc38f550daf
Size

74KB
MD5

0acde20e55456ad9d9383fa6a2312030
SHA1

46851816718af5d1a7b98c1fd1613726523c9fc8
SHA256

fbdb5ef583e5fbd30f29786aa27beb5797a6871deb0529ef3e989bc38f550daf
SHA512

f466cee68f5ff9b5d4ccaa2665c84cb08c08489fe23de2df1a743a9393e66a9f7ea452c19e6ea552f087f7adcb24a9866a46b5344017f20a250159be62b9e7be
SSDEEP

1536:PvNSpxKvU3nHUp8aHSRVhHzd9Km2b08jdBkgGIGVXe9uHyBhG3ptQvW+G:WUvm0pzSn9KJ5nkgGIge9uHwhG3ptQ+3

Score

N/A

Malware Config

Signatures

Files

fbdb5ef583e5fbd30f29786aa27beb5797a6871deb0529ef3e989bc38f550daf
.exe windows x86

47e6ee77a094f688380af650b457a32b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetComputerNameExW
GetModuleFileNameW
GetConsoleOutputCP
ExitProcess
GetSystemDirectoryW
LoadLibraryW
FreeLibrary
HeapReAlloc
HeapFree
WriteConsoleW
ReadConsoleW
HeapSize
HeapAlloc
GetProcessHeap
HeapValidate
WideCharToMultiByte
MultiByteToWideChar
CompareStringA
GetThreadLocale
CompareStringW
lstrlenW
lstrlenA
GetFileAttributesW
GetStdHandle
GetConsoleMode
SetConsoleMode
FlushConsoleInputBuffer
ReadFile
GetCurrentDirectoryW
FindFirstFileW
FindNextFileW
FindClose
GetVolumePathNameW
GetVolumeInformationW
CreateFileW
LocalFree
GetComputerNameW
GetLastError
GetCurrentProcessId
OpenProcess
CloseHandle
GetFileType
VerSetConditionMask
VerifyVersionInfoW
FormatMessageW
SetLastError

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
wcsrchr
wcspbrk
_wcsicmp
wcstok
_iob
_vsnwprintf
_errno
_get_osfhandle
_fileno
toupper
wcstod
wcstoul
wcstol
fflush
fprintf
strtok
_except_handler3

advapi32

GetFileSecurityW
AllocateAndInitializeSid
LookupAccountNameW
CheckTokenMembership
FreeSid
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
AddAce
GetTokenInformation
InitializeSecurityDescriptor
GetSecurityInfo
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetFileSecurityW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken

user32

LoadStringW
CharUpperW

mpr

WNetAddConnection2W
WNetGetLastErrorW
WNetCancelConnection2W

secur32

GetUserNameExW

ws2_32

WSACleanup
WSAStartup
WSAGetLastError
inet_addr
gethostbyaddr

shlwapi

StrStrIW
StrChrW
StrChrIW
StrStrW

netapi32

NetServerGetInfo
NetApiBufferFree

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

47e6ee77a094f688380af650b457a32b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

user32

mpr

secur32

ws2_32

shlwapi

netapi32

version

Sections

.text Size: 41KB - Virtual size: 40KB

.data Size: 512B - Virtual size: 388B

.rsrc Size: 31KB - Virtual size: 35KB

.text
Size: 41KB - Virtual size: 40KB

.data
Size: 512B - Virtual size: 388B

.rsrc
Size: 31KB - Virtual size: 35KB