af209e14ee1f91a7d51e364863857b76ce545ca924b35e524eeddb3e179f3e41

General

Target

af209e14ee1f91a7d51e364863857b76ce545ca924b35e524eeddb3e179f3e41
Size

214KB
MD5

1bd7bb5c0da00d10394a6fdc507b14f8
SHA1

361ec42559fcfc5ca2d381c4c059206268f456f8
SHA256

af209e14ee1f91a7d51e364863857b76ce545ca924b35e524eeddb3e179f3e41
SHA512

3cf18abf53defb69f6d9f00bed658338b45285857fb6294c7a81c50f56f0eb44952228cf564789ec8625e4b0cc58244d59b4d44b0ccd8908b0462061d5364c1c
SSDEEP

3072:JcMFD4c9t444J5DCCcbMLfD/eGF3UvgBPD3dK8lQicYWefTmochwCl3OzaW0SdGE:LD4mj4JFJcbseGdUvUs8lY7Ozaa

Score

N/A

Malware Config

Signatures

Files

af209e14ee1f91a7d51e364863857b76ce545ca924b35e524eeddb3e179f3e41
.exe windows x86

a7134995c80266ddb0e4b994a24279e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

schannel

QuerySecurityPackageInfoW
QueryContextAttributesW
QueryContextAttributesA
InitializeSecurityContextW
QuerySecurityPackageInfoA
MakeSignature

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExW

kernel32

GetCurrentProcess
LockResource
QueryPerformanceCounter
HeapAlloc
SetLastError
FindResourceA
GetTickCount
SetUnhandledExceptionFilter
CreateFileA
MultiByteToWideChar
HeapFree
GetProcessHeap
lstrcmpA
GetCurrentProcessId
QueryDosDeviceA
GetOEMCP
CloseHandle
GetSystemTimeAsFileTime
LoadLibraryW
SystemTimeToFileTime
GetVolumeInformationA
lstrcpyA
GetLocalTime
lstrlenA
GetLocaleInfoW
WideCharToMultiByte

secur32

FreeCredentialsHandle
FreeContextBuffer
ExportSecurityContext
EnumerateSecurityPackagesW
GetComputerObjectNameA

scecli

SceAddToObjectList
SceAppendSecurityProfileInfo
SceAddToNameStatusList
SceAnalyzeSystem
SceCloseProfile
SceBrowseDatabaseTable

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7134995c80266ddb0e4b994a24279e6

Headers

File Characteristics

Imports

schannel

advapi32

kernel32

secur32

scecli

Sections

.text Size: 137KB - Virtual size: 137KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 17KB - Virtual size: 2.3MB

.rcrc Size: 2KB - Virtual size: 2KB

.text
Size: 137KB - Virtual size: 137KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 17KB - Virtual size: 2.3MB

.rcrc
Size: 2KB - Virtual size: 2KB