971fe72f578ac7e8b2d53af246539d41941934676ddcca462d7b65fdf28d6368

General

Target

971fe72f578ac7e8b2d53af246539d41941934676ddcca462d7b65fdf28d6368
Size

64KB
MD5

142d16522cd8a3ad2454abd6d4178d31
SHA1

8cb3fdab5bdd77b1bd470b2da439e699e37899b8
SHA256

971fe72f578ac7e8b2d53af246539d41941934676ddcca462d7b65fdf28d6368
SHA512

59caeea19dc4f8d676f0606e9e81267900a176eddc3656a0673caec8c1343a94ad681effd6f5c3b6c8d127d6213db3bfe731cc795ca99e67622b8d5019d03c7a
SSDEEP

1536:yJ0JBB5J9jWTjzVccxrioe7kQduMeDFUvKsMGzTkC0q+u4:yiJX9iHz2Ai7k/DSKsvzJ0m4

Score

N/A

Malware Config

Signatures

Files

971fe72f578ac7e8b2d53af246539d41941934676ddcca462d7b65fdf28d6368
.exe windows x86

add78281e2a09fec5d5b7cd92c5cffe0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
WriteConsoleA
VirtualAlloc
SetVolumeLabelA
EndUpdateResourceA
SetEvent
FindNextVolumeW
GetTapeStatus
SystemTimeToTzSpecificLocalTime
FindNextVolumeA
GetTempPathA
VerifyVersionInfoA
SetVolumeLabelW
OpenJobObjectA
SetVolumeMountPointA
SetTimeZoneInformation

dhcpcsvc

DhcpUndoRequestParams

d3d8

DebugSetMute

Exports

Exports

Glrexdb
Rhmcjugvx
Ixucvlawyf
Hvellicb
SetQsslutmfdil
SetIxvywwexkp
Vbrpiwimhhf
Cquektcxnr
CloseXnlgxisqf
Bfwnfgj
Aeqpbpcl
Wubrhee
Fnxaedikih
Corldvbrkks
AddCxnnnqjkl
EndEaviggbtvw
Wwoabho
ReadSmrporgklqx

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

aljlbpi
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

add78281e2a09fec5d5b7cd92c5cffe0

Headers

File Characteristics

Imports

kernel32

dhcpcsvc

d3d8

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 40KB

.data Size: 1024B - Virtual size: 600B

.rdata Size: 19KB - Virtual size: 126KB

.edata Size: 512B - Virtual size: 448B

.idata Size: 1024B - Virtual size: 548B

.rsrc Size: 1024B - Virtual size: 29KB

aljlbpi Size: - Virtual size: 4KB

.text
Size: 41KB - Virtual size: 40KB

.data
Size: 1024B - Virtual size: 600B

.rdata
Size: 19KB - Virtual size: 126KB

.edata
Size: 512B - Virtual size: 448B

.idata
Size: 1024B - Virtual size: 548B

.rsrc
Size: 1024B - Virtual size: 29KB

aljlbpi
Size: - Virtual size: 4KB