69ad1f78beb56226f07833ea2707ed4d8918f176605809814759d16b6cffdd35

Sharing

Copy URL

Twitter E-mail

General

Target

69ad1f78beb56226f07833ea2707ed4d8918f176605809814759d16b6cffdd35
Size

690KB
MD5

ea29f892f63fb38daa76c893c60e1656
SHA1

b5c55fdea4f3394604aa208bc00bb483bb32fef7
SHA256

69ad1f78beb56226f07833ea2707ed4d8918f176605809814759d16b6cffdd35
SHA512

274b44c2d1cad2fc1c2dff8c6b752dc8e2b185dc919c42f957e096bce9a665dfbf38860fadc603dd6c8be8bdeeb2041029220d15ddda024984110f8468f0ec1c
SSDEEP

12288:ON7V0bGwCxJOUfqvV8WzMx7BZEsIE6Zr1pZyAtZmbdS8ygIqUM9fiKZmI:ON7npqviWzMxnE46ZtysmbdNQqUgKS

Score

N/A

Malware Config

Signatures

Files

69ad1f78beb56226f07833ea2707ed4d8918f176605809814759d16b6cffdd35
.exe windows x86

7dbf6502d86416352241616e6ed144a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropVariantCopy
CoRegisterMallocSpy
ReleaseStgMedium
CLSIDFromString
BindMoniker
CoUninitialize
OleCreateEx
CoFreeUnusedLibraries
ReadClassStm
CoGetPSClsid
OleCreateLinkToFile

oledlg

ord8
ord3
ord5

comctl32

ord2
ord6
ord13
FlatSB_SetScrollRange
InitializeFlatSB
FlatSB_GetScrollInfo
CreateToolbarEx
ord16
CreatePropertySheetPageA
PropertySheetA

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

ws2_32

socket
recv
inet_addr
connect
recvfrom
send
bind
getservbyname
getsockname
getprotobyname
ntohs
getsockopt
getservbyport
htons
closesocket

setupapi

SetupDiInstallDevice
SetupGetLineCountA
SetupInstallFileExW
SetupOpenInfFileA
SetupDiGetINFClassW
SetupGetLineTextA
SetupFindNextLine
SetupGetLineByIndexA
SetupOpenMasterInf
SetupAddToDiskSpaceListA
SetupCopyOEMInfW
SetupDiGetHwProfileList

ntdsapi

DsListServersInSiteW

Sections

.text
Size: 664KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dbf6502d86416352241616e6ed144a6

Headers

File Characteristics

Imports

ole32

oledlg

comctl32

kernel32

ws2_32

setupapi

ntdsapi

Sections

.text Size: 664KB - Virtual size: 664KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 145KB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 664KB - Virtual size: 664KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 145KB

.rsrc
Size: 19KB - Virtual size: 18KB