bcdef8aa986583f3991cd042f10af97ce1921f3c7b8637e62e70b3e3551142ba

General

Target

bcdef8aa986583f3991cd042f10af97ce1921f3c7b8637e62e70b3e3551142ba
Size

635KB
MD5

8f64badd31a7987200c9f93dd51a33a1
SHA1

bea77f9b219f3029ed4a7d2871ef14c5d354a828
SHA256

bcdef8aa986583f3991cd042f10af97ce1921f3c7b8637e62e70b3e3551142ba
SHA512

2e6671436e09e732b17a94022d9802a6714b1077a758fc65e8d0f8801f79d4b50e5ac743d0ac929b260d5f81da54fa5b060a7e8a3c7f18244d906cb9f6b02ca3
SSDEEP

12288:n04eNXT44WZWrLbx3ihGi/zrFy7hrq4VWZzq+uCdy7UYvBqmsLegJQYb:n04eBjAhpy1uwWxqTC8gYJ2SgJn

Score

N/A

Malware Config

Signatures

Files

bcdef8aa986583f3991cd042f10af97ce1921f3c7b8637e62e70b3e3551142ba
.exe windows x86

e2f0285b3a5e89ab88923b55fe082240

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

tapi32

lineParkA
lineGetCallStatus
lineTranslateAddressW
lineInitializeExW
tapiGetLocationInfoW
lineOpen
lineGetIDA
lineMakeCallA

kernel32

GetConsoleNlsMode
LoadLibraryA
ReadProcessMemory
EnumDateFormatsExW
WaitForDebugEvent
VirtualAlloc
ProcessIdToSessionId
LoadLibraryW
RemoveDirectoryA
VirtualProtect

mscms

CreateColorTransformW
GetStandardColorSpaceProfileW
CloseColorProfile
TranslateBitmapBits

advapi32

AddAccessDeniedAce
RegRestoreKeyW
WmiSetSingleInstanceW
RegisterEventSourceW
CreateWellKnownSid
RegSetValueExA
LsaLookupPrivilegeValue
RegSetKeySecurity

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 296KB - Virtual size: 522KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 257KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2f0285b3a5e89ab88923b55fe082240

Headers

DLL Characteristics

File Characteristics

Imports

tapi32

kernel32

mscms

advapi32

Sections

.text Size: 41KB - Virtual size: 40KB

.data Size: 296KB - Virtual size: 522KB

.idata Size: 257KB - Virtual size: 302KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 1024B - Virtual size: 234B

.text
Size: 41KB - Virtual size: 40KB

.data
Size: 296KB - Virtual size: 522KB

.idata
Size: 257KB - Virtual size: 302KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 1024B - Virtual size: 234B