54b230b1df51ba36d7b38e17bcc7b2f5d5ad0d05e2b8dc94893cf47d6d3c1e84

General

Target

54b230b1df51ba36d7b38e17bcc7b2f5d5ad0d05e2b8dc94893cf47d6d3c1e84
Size

111KB
MD5

83254d8bf9ca7179f20e85f153dd3b2d
SHA1

7dee0dba027f5e4cbc8ab495e2f5006b27371cd4
SHA256

54b230b1df51ba36d7b38e17bcc7b2f5d5ad0d05e2b8dc94893cf47d6d3c1e84
SHA512

9cced9a09a0d05a5a3a669c3af4a1c16e387ea74dd15e8f7feb747429b431b76c24c622e805303006796875e56d09ea67ac6b37e14987a5a4a5661598617624e
SSDEEP

1536:wFTSRi5hao8fFWydcPR+jSy1rycbiH/qBAlxQ6teVJf1mfnU8wYhp:w8YIWy2PR+ey1ryceflDdfnk4

Score

N/A

Malware Config

Signatures

Files

54b230b1df51ba36d7b38e17bcc7b2f5d5ad0d05e2b8dc94893cf47d6d3c1e84
.exe windows x86

79675a79de81f0ed1e1bb8af3f50a845

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

ImportSecurityContextW
QueryContextAttributesA
LsaRegisterLogonProcess
AcquireCredentialsHandleW
QuerySecurityPackageInfoA
SealMessage
SaslIdentifyPackageW
TranslateNameA
AddCredentialsW
GetComputerObjectNameA
GetComputerObjectNameW
QueryContextAttributesW
LsaFreeReturnBuffer
QuerySecurityContextToken
ExportSecurityContext
EnumerateSecurityPackagesA
LsaUnregisterPolicyChangeNotification
ApplyControlToken
LsaLogonUser
VerifySignature
SaslEnumerateProfilesA
LsaDeregisterLogonProcess
QuerySecurityPackageInfoW
AddCredentialsA

iphlpapi

GetUniDirectionalAdapterInfo
NhpAllocateAndGetInterfaceInfoFromStack
IpRenewAddress
AddIPAddress
CreateIpNetEntry
GetUdpTable
GetPerAdapterInfo
NotifyAddrChange
InternalCreateIpNetEntry
InternalSetTcpEntry
DeleteIpForwardEntry
InternalCreateIpForwardEntry
GetNetworkParams
GetIpAddrTable
SetIpStatistics
GetRTTAndHopCount
AllocateAndGetIpAddrTableFromStack
GetFriendlyIfIndex
InternalGetIfTable
EnableRouter
SetIpTTL
SetIpNetEntry
InternalGetIpForwardTable
GetNumberOfInterfaces
NhGetInterfaceNameFromGuid
GetAdapterOrderMap
GetIfEntry
InternalDeleteIpNetEntry
GetUdpStatistics
SetIpForwardEntry

kernel32

SetFileApisToOEM
ResumeThread
_lclose
BackupWrite

user32

SendMessageCallbackA

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79675a79de81f0ed1e1bb8af3f50a845

Headers

File Characteristics

Imports

secur32

iphlpapi

kernel32

user32

Sections

.text Size: 53KB - Virtual size: 53KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 36KB - Virtual size: 232KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 53KB - Virtual size: 53KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 36KB - Virtual size: 232KB

.rsrc
Size: 10KB - Virtual size: 10KB