b3f3d955681fede5450f4d4a7120f8723066175f167b353933b858e0cf49a2b9

Sharing

Copy URL Twitter E-mail

General

Target

b3f3d955681fede5450f4d4a7120f8723066175f167b353933b858e0cf49a2b9
Size

49KB
MD5

6055fca2a75956f3bc9ab80961da6db0
SHA1

21664d22bed4bcaec6747819a6b0b1a0cf47a73c
SHA256

b3f3d955681fede5450f4d4a7120f8723066175f167b353933b858e0cf49a2b9
SHA512

3b6ae8b1d8cf7e09c99c331ba6aea9ba6a053cda22c72936cc153cc6e58741b7dfe58bb17542112ca1434dadc38190b6e1965fa1221a28d0426abffd805a7d00
SSDEEP

768:UjuAlBffhHvZ/lHP/+ya4h2hZPuPjvItSUO7Vito4HhV:UjtpZHv1l+yauekj9ViG4Hh

Score

N/A

Malware Config

Signatures

Files

b3f3d955681fede5450f4d4a7120f8723066175f167b353933b858e0cf49a2b9
.exe windows x86

477c9b82267fb46c5572e1e759a298c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

NetServerEnumEx
NetShareEnumSticky
NetSessionEnum
NetServerTransportAddEx
NetServerTransportAdd
NetServerComputerNameDel

mswsock

AcceptEx

msi

ord70

kernel32

GetStartupInfoA
GlobalAlloc
VirtualProtect
GetModuleHandleA

ole32

CoGetObject
CreateDataCache
OleConvertOLESTREAMToIStorageEx
OleCreateEmbeddingHelper
OleRegEnumVerbs
StgCreateDocfileOnILockBytes
MonikerRelativePathTo
CoRegisterMallocSpy
WriteFmtUserTypeStg
OleCreateLinkToFileEx
STGMEDIUM_UserMarshal
CreateOleAdviseHolder
CoLockObjectExternal
OleCreateStaticFromData
CreateItemMoniker
OleCreateFromData
HBITMAP_UserFree
CoGetStdMarshalEx
StgIsStorageFile
CoMarshalHresult
StgCreatePropStg
OleCreateLinkFromData
FreePropVariantArray
MkParseDisplayName
OleRun
OleLockRunning
StgOpenStorage
SNB_UserMarshal
OleCreateDefaultHandler
CLSIDFromString
OleQueryLinkFromData

user32

RegisterClassExA
CreateWindowExW

nddeapi

ord504
ord602
ord505
ord606
ord509
ord609

oleaut32

BSTR_UserMarshal

oleacc

AccessibleObjectFromWindow

msvcrt

__getmainargs
_initterm
_acmdln
_adjust_fdiv
__p__commode
__p__fmode
exit
_XcptFilter
_exit
__setusermatherr
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

477c9b82267fb46c5572e1e759a298c4

Headers

File Characteristics

Imports

netapi32

mswsock

msi

kernel32

ole32

user32

nddeapi

oleaut32

oleacc

msvcrt

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 92KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 92KB

.rsrc
Size: 4KB - Virtual size: 2KB