ab9f4c1543c81e59144704f4fd9ea33fb74ca0044d8ba0e4d31ee1ad944f7548

Sharing

Copy URL Twitter E-mail

General

Target

ab9f4c1543c81e59144704f4fd9ea33fb74ca0044d8ba0e4d31ee1ad944f7548
Size

72KB
MD5

08dc4be9eb394acb0d436533528527f6
SHA1

01c1041a3b1425162b6fbbb9eb61e18a51cc4cbc
SHA256

ab9f4c1543c81e59144704f4fd9ea33fb74ca0044d8ba0e4d31ee1ad944f7548
SHA512

faa3074acc07a1225b2b1b618784eddc3cbdba4b36fcf02dc7ad98da5eab62430002690da8b81fc4c3a271cf104fc7f6a99bf3346603d5f640d8cdefca95bcfe
SSDEEP

1536:wp08s3V/7mowpZ27yMxBNiqpO/V31SOEnKXrJbcwJVe+YNqsYN+gnLqDmcKr/:AyFjID27VBNiqpOt31KOrhAFqSJDI/

Score

N/A

Malware Config

Signatures

Files

ab9f4c1543c81e59144704f4fd9ea33fb74ca0044d8ba0e4d31ee1ad944f7548
.exe windows x86

3ba6b0b7730bbcd4e89b035c3a6edef0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZCopy
SetFileAttributesA
SetConsolePalette
TzSpecificLocalTimeToSystemTime
GetLastError
GetDevicePowerState
WriteConsoleInputW
GetCommConfig
GetCompressedFileSizeW
LoadLibraryExW
GetSystemDirectoryW
CreateRemoteThread
GetStartupInfoW
GetTickCount
VerifyVersionInfoW
WriteConsoleInputVDMA
WritePrivateProfileStringW
FreeLibrary
GetLocaleInfoW
GlobalUnlock
MultiByteToWideChar
SetConsoleDisplayMode
IsBadReadPtr
DeleteFileA
SetCommState
LoadLibraryA
EnumResourceNamesW
SignalObjectAndWait
FileTimeToSystemTime
IsBadStringPtrW
SetConsoleMenuClose
FindVolumeMountPointClose
GlobalDeleteAtom
UpdateResourceA
FindNextVolumeW
LocalAlloc
ProcessIdToSessionId
VirtualAlloc
FindNextVolumeMountPointW

samlib

SamChangePasswordUser
SamiOemChangePasswordUser2
SamShutdownSamServer
SamRemoveMemberFromForeignDomain
SamSetInformationUser
SamQuerySecurityObject
SamGetGroupsForUser
SamAddMemberToGroup
SamiLmChangePasswordUser
SamDeleteGroup
SamEnumerateUsersInDomain
SamOpenUser
SamSetInformationDomain
SamiSetBootKeyInformation
SamFreeMemory
SamAddMultipleMembersToAlias
SamiSetDSRMPassword
SamLookupNamesInDomain
SamLookupIdsInDomain
SamGetMembersInAlias
SamSetSecurityObject
SamCreateAliasInDomain
SamGetCompatibilityMode
SamSetInformationAlias
SamiChangePasswordUser
SamCloseHandle
SamConnectWithCreds
SamQueryInformationGroup
SamChangePasswordUser3
SamDeleteAlias
SamEnumerateAliasesInDomain
SamGetMembersInGroup
SamiChangePasswordUser2
SamConnect
SamCreateGroupInDomain
SamEnumerateDomainsInSamServer
SamiEncryptPasswords
SamOpenGroup
SamTestPrivateFunctionsUser
SamCreateUserInDomain
SamRemoveMemberFromGroup
SamRidToSid

msvcrt

_isctype
_adj_fptan
??_Fbad_cast@@QAEXXZ
_getw
atexit
?set_new_handler@@YAP6AXXZP6AXXZ@Z
??0bad_cast@@AAE@PBQBD@Z
_outpw
_findfirst64
srand
??0bad_cast@@QAE@ABV0@@Z
??_Gbad_typeid@@UAEPAXI@Z
_adj_fprem
_wstat
__p___initenv
__pctype_func
free
__isascii
__crtCompareStringW
_wfindfirst
_aexit_rtn
_access
_fullpath
wcscspn
_acmdln
_adj_fpatan
_aligned_offset_realloc
__toascii
_strnicoll
vswprintf
_wsetlocale
_mbsnset
_local_unwind2
_strnset
exp
_cwprintf
_beginthread
_wrename
_chdrive
__p__pctype

adsldpc

intcmp
LdapParseResult
LdapSearchExtS
LdapGetSubSchemaSubEntryPath
ADsGetLastError
LdapModifyExtS
LdapTypeToAdsTypeGeneralizedTime
AdsTypeToLdapTypeCopyDNWithBinary
ADSICloseSearchHandle
ADsFreeColumn
LdapTypeBinaryToString
LdapIsClassNameValidOnServer
LdapGetValues
SchemaGetSyntaxOfAttribute
ADsExecuteSearch
ADsWriteClassDefinition
LdapOpenObject2
MapADSTypeToLDAPType
LdapTypeFreeLdapObjects
LdapSearchInitPage
LdapInitializeSearchPreferences
ADsDeleteDSObject
GetDomainDNSNameForDomain
SchemaIsClassAContainer
ReadSecurityDescriptorControlType
ADsGetNextColumnName
AdsTypeFreeAdsObjects
LdapAttributeFree
ADsDecodeBinaryData
ADSIOpenDSObject

rasapi32

RasSetEntryPropertiesA
RasQuerySharedAutoDial
RasGetAutodialParamW
RasSetAutodialParamW
RasAutodialEntryToNetwork
RasGetHport
RasEnumConnectionsW
RasGetSubEntryHandleA
RasEditPhonebookEntryA
RasGetProjectionInfoW
RasValidateEntryNameW
RasGetConnectStatusW
RasClearConnectionStatistics
RasSetAutodialParamA
RasGetCredentialsA
RasGetEntryDialParamsA
RasGetCustomAuthDataA
RasSetAutodialEnableW
RasGetAutodialParamA
RasSetAutodialAddressA
RasGetSubEntryPropertiesA
RasGetErrorStringW
RasConnectionNotificationA
RasCreatePhonebookEntryA
RasDeleteEntryA
RasGetAutodialAddressW
RasSetEapUserDataW
RasHangUpW

resutils

ResUtilFindBinaryProperty
ResUtilVerifyPropertyTable
ResUtilGetResourceDependency
ResUtilFindExpandedSzProperty
ResUtilSetPropertyTableEx
ResUtilExpandEnvironmentStrings
ResUtilGetPropertySize
ResUtilFindDependentDiskResourceDriveLetter
ResUtilFindLongProperty
ResUtilSetPropertyTable
ResUtilSetMultiSzValue
ResUtilVerifyPrivatePropertyList
ResUtilResourceTypesEqual
ResUtilFindExpandSzProperty
ResUtilGetResourceDependencyByName
ResUtilSetPropertyParameterBlockEx
ResUtilGetAllProperties
ResUtilStopService
ResUtilEnumProperties
ResUtilSetUnknownProperties
ClusWorkerStart
ResUtilGetBinaryProperty
ResUtilResourcesEqual
ResUtilIsResourceClassEqual
ResUtilSetPrivatePropertyList
ClusWorkerCreate
ResUtilIsPathValid
ResUtilGetResourceName
ResUtilSetExpandSzValue
ResUtilGetDwordProperty
ResUtilEnumResources
ResUtilGetProperties
ResUtilFindMultiSzProperty
ClusWorkerTerminate
ResUtilEnumResourcesEx
ClusWorkerCheckTerminate
ResUtilSetResourceServiceStartParameters
ResUtilEnumPrivateProperties
ResUtilDupParameterBlock
ResUtilFreeParameterBlock
ResUtilGetResourceNameDependency
ResUtilSetResourceServiceEnvironment
ResUtilGetMultiSzProperty
ResUtilSetPropertyParameterBlock

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ba6b0b7730bbcd4e89b035c3a6edef0

Headers

File Characteristics

Imports

kernel32

samlib

msvcrt

adsldpc

rasapi32

resutils

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 195KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 195KB

.rsrc
Size: 3KB - Virtual size: 2KB