2084a8f354974ef1e04278d933f3701bc9507fcacf5554cb043e391d807786ae

Sharing

Copy URL Twitter E-mail

General

Target

2084a8f354974ef1e04278d933f3701bc9507fcacf5554cb043e391d807786ae
Size

172KB
MD5

0d8bede5fd387d8a66f73b9af7477b80
SHA1

23bd08ebf37ad99fd4556e16c0a02f56a8eaa128
SHA256

2084a8f354974ef1e04278d933f3701bc9507fcacf5554cb043e391d807786ae
SHA512

3b61dd127dc1a0bf8f3519672153b5dbff1ae5e1af5f68c5d9635346a427d4c1934333d0854d65de22c94aa055cbb39deff763f92f3fcbec08f314584cdb7113
SSDEEP

3072:NMoleO1NI3fP6BiVRZAR3KwFfFoWUFo15GaszZBHlrwokVOayAfx3Z5/3+p:J0O0miVRZAR39FfFFJ1MasNBRdaXz/3C

Score

N/A

Malware Config

Signatures

Files

2084a8f354974ef1e04278d933f3701bc9507fcacf5554cb043e391d807786ae
.exe windows x86

07d1943271a0dd36275ba6af14115ce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CLSIDFromString
CoInitialize
OleUninitialize
OleInitialize

hlink

ord29
ord32
ord22
ord20
ord5

msdmo

MoCreateMediaType
DMOEnum

ntdsapi

DsReplicaConsistencyCheck
DsReplicaDelA
DsReplicaAddA
DsRemoveDsServerA
DsRemoveDsDomainA
DsQuoteRdnValueA
DsIsMangledDnA
DsInheritSecurityIdentityA
DsBindWithCredA
DsCrackNamesA
DsFreeNameResultA
DsUnquoteRdnValueA

oleaut32

VariantCopyInd
VariantInit
SysStringLen
SysAllocStringLen
SysReAllocString
SysAllocString
VariantChangeType

kernel32

HeapFree
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
GetOEMCP
GetACP
LoadLibraryA
InterlockedExchange
RtlUnwind
GetCPInfo
GetLocaleInfoA
IsBadWritePtr
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
GetProcAddress
ExitProcess
LCMapStringW
GetProfileStringW
GetTempPathA
lstrcmpiA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 633KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07d1943271a0dd36275ba6af14115ce8

Headers

File Characteristics

Imports

ole32

hlink

msdmo

ntdsapi

oleaut32

kernel32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 44KB - Virtual size: 633KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 44KB - Virtual size: 633KB

.rsrc
Size: 4KB - Virtual size: 1KB