03e9f79fa3a16ad3348ea16b3bc29978d43590c937a2e2d5dbd238c02d54c6b9

Sharing

Copy URL Twitter E-mail

General

Target

03e9f79fa3a16ad3348ea16b3bc29978d43590c937a2e2d5dbd238c02d54c6b9
Size

10KB
MD5

ce4968337a8eb65484fb5921fe676715
SHA1

47307cc84cfd64eb4010877ff3a8943b7989aedd
SHA256

03e9f79fa3a16ad3348ea16b3bc29978d43590c937a2e2d5dbd238c02d54c6b9
SHA512

47b4ad80df7612a8de085651da69c2ceddf9fe4836b52ba114cdd0c12b21d16be8895a2715c3d5a4d53e96b9f5ba397f4b89aec7941ed92a471c5afc351881b1
SSDEEP

192:K4m0PPK21yziWgZDvmTwFuzdi9kLjrNPF1n65ri96iw84/d3qToL86fgbyjTTU82:K4K2Mzi1+wItXa6s/lBT/O

Score

N/A

Malware Config

Signatures

Files

03e9f79fa3a16ad3348ea16b3bc29978d43590c937a2e2d5dbd238c02d54c6b9
.zip
account_report0209.scr
.exe windows x86

a921b6af715992cfb1c52482ca5c04da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

mssign32

PvkPrivateKeyLoad
PvkPrivateKeyLoad
PvkPrivateKeyLoad

mtxoci

MTxOciInit
MTxOciInit
MTxOciInit
MTxOciInit

msoert2

CreateLogFile
CreateLogFile
CreateLogFile
CreateLogFile

nddeapi

NDdeGetTrustedShareA
NDdeGetTrustedShareA
NDdeGetTrustedShareA
NDdeGetTrustedShareA

mlang

ConvertINetReset
ConvertINetReset

kernel32

ReplaceFileA
GetACP
RtlMoveMemory
SetComputerNameA
QueryDosDeviceA
CreateJobObjectW
ReadConsoleOutputW
RegisterWowExec
Beep
_lopen
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA
ReadFile
ReplaceFileA
GetACP
RtlMoveMemory
SetComputerNameA
QueryDosDeviceA
CreateJobObjectW
ReadConsoleOutputW
RegisterWowExec
Beep
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA

pdh

PdhCloseLog
PdhCloseQuery
PdhCollectQueryData
PdhCollectQueryDataEx
PdhComputeCounterStatistics
PdhConnectMachineA
PdhConnectMachineW
PdhCreateSQLTablesA
PdhCreateSQLTablesW
PdhEnumLogSetNamesA
PdhEnumLogSetNamesW
PdhEnumMachinesA
PdhEnumMachinesHA
PdhEnumMachinesHW
PdhEnumMachinesW
PdhEnumObjectItemsA
PdhEnumObjectItemsHA
PdhEnumObjectItemsHW
PdhEnumObjectItemsW
PdhEnumObjectsA
PdhEnumObjectsHA
PdhEnumObjectsHW
PdhEnumObjectsW
PdhCloseLog
PdhCloseQuery
PdhCollectQueryData
PdhCollectQueryDataEx
PdhComputeCounterStatistics
PdhConnectMachineA
PdhConnectMachineW
PdhCreateSQLTablesA
PdhCreateSQLTablesW
PdhEnumLogSetNamesA
PdhEnumLogSetNamesW
PdhEnumMachinesA
PdhEnumMachinesHA
PdhEnumMachinesHW
PdhEnumMachinesW
PdhEnumObjectItemsA
PdhEnumObjectItemsHA
PdhEnumObjectItemsHW
PdhEnumObjectItemsW
PdhEnumObjectsA
PdhEnumObjectsHA
PdhEnumObjectsHW
PdhEnumObjectsW
PdhCloseLog
PdhCloseQuery
PdhCollectQueryData
PdhCollectQueryDataEx
PdhComputeCounterStatistics
PdhConnectMachineA
PdhConnectMachineW
PdhCreateSQLTablesA
PdhCreateSQLTablesW
PdhEnumLogSetNamesA
PdhEnumLogSetNamesW
PdhEnumMachinesA
PdhEnumMachinesHA
PdhEnumMachinesHW
PdhEnumMachinesW
PdhEnumObjectItemsA
PdhEnumObjectItemsHA
PdhEnumObjectItemsHW
PdhEnumObjectItemsW
PdhEnumObjectsA
PdhEnumObjectsHA
PdhEnumObjectsHW
PdhEnumObjectsW
PdhCreateSQLTablesW
PdhEnumLogSetNamesA
PdhEnumLogSetNamesW
PdhEnumMachinesA
PdhEnumMachinesHA

msvcrt

fopen
fread

Sections

.text
Size: 2KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 70KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a921b6af715992cfb1c52482ca5c04da

Headers

File Characteristics

Imports

mssign32

mtxoci

msoert2

nddeapi

mlang

kernel32

pdh

msvcrt

Sections

.text Size: 2KB - Virtual size: 34KB

.DATA Size: 10KB - Virtual size: 70KB

.reloc Size: 13KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 2KB

.text
Size: 2KB - Virtual size: 34KB

.DATA
Size: 10KB - Virtual size: 70KB

.reloc
Size: 13KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 2KB