d1aa1bbfe12dfe1f8b53c4d1111523c3445a1879b6eb165ce98d80d38884a782

General

Target

d1aa1bbfe12dfe1f8b53c4d1111523c3445a1879b6eb165ce98d80d38884a782
Size

65KB
MD5

4ece90eef2d3e2286e8a20383f0f6e96
SHA1

ae039541409d4c589c8136ae6bcd9a18082a054a
SHA256

d1aa1bbfe12dfe1f8b53c4d1111523c3445a1879b6eb165ce98d80d38884a782
SHA512

a3219e1c3204cc0ca6d5b4480a9e51acbeda02d65852cb8c047b309652840fa55d1266483c2bd2727b0b4e8c118ed6c8f1e7f68d01bbd0fce06dad3519b3801e
SSDEEP

1536:ZVcxLAhx2hczhB94e8qiGOts0HfVM8APZew6V:ZS/UTniGOts0/Vfw6V

Score

N/A

Malware Config

Signatures

Files

d1aa1bbfe12dfe1f8b53c4d1111523c3445a1879b6eb165ce98d80d38884a782
.zip
report_id_875893475983475934759384.exe
.exe windows x86

79675a79de81f0ed1e1bb8af3f50a845

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

ImportSecurityContextW
QueryContextAttributesA
LsaRegisterLogonProcess
AcquireCredentialsHandleW
QuerySecurityPackageInfoA
SealMessage
SaslIdentifyPackageW
TranslateNameA
AddCredentialsW
GetComputerObjectNameA
GetComputerObjectNameW
QueryContextAttributesW
LsaFreeReturnBuffer
QuerySecurityContextToken
ExportSecurityContext
EnumerateSecurityPackagesA
LsaUnregisterPolicyChangeNotification
ApplyControlToken
LsaLogonUser
VerifySignature
SaslEnumerateProfilesA
LsaDeregisterLogonProcess
QuerySecurityPackageInfoW
AddCredentialsA

iphlpapi

GetUniDirectionalAdapterInfo
NhpAllocateAndGetInterfaceInfoFromStack
IpRenewAddress
AddIPAddress
CreateIpNetEntry
GetUdpTable
GetPerAdapterInfo
NotifyAddrChange
InternalCreateIpNetEntry
InternalSetTcpEntry
DeleteIpForwardEntry
InternalCreateIpForwardEntry
GetNetworkParams
GetIpAddrTable
SetIpStatistics
GetRTTAndHopCount
AllocateAndGetIpAddrTableFromStack
GetFriendlyIfIndex
InternalGetIfTable
EnableRouter
SetIpTTL
SetIpNetEntry
InternalGetIpForwardTable
GetNumberOfInterfaces
NhGetInterfaceNameFromGuid
GetAdapterOrderMap
GetIfEntry
InternalDeleteIpNetEntry
GetUdpStatistics
SetIpForwardEntry

kernel32

SetFileApisToOEM
ResumeThread
_lclose
BackupWrite

user32

SendMessageCallbackA

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79675a79de81f0ed1e1bb8af3f50a845

Headers

File Characteristics

Imports

secur32

iphlpapi

kernel32

user32

Sections

.text Size: 53KB - Virtual size: 53KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 36KB - Virtual size: 232KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 53KB - Virtual size: 53KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 36KB - Virtual size: 232KB

.rsrc
Size: 10KB - Virtual size: 10KB