94ae42cc58a296bb6523c80d2838b04f8e5ce90fb7b81b7d0bd283fad95fd480

Sharing

Copy URL Twitter E-mail

General

Target

94ae42cc58a296bb6523c80d2838b04f8e5ce90fb7b81b7d0bd283fad95fd480
Size

837KB
MD5

60e7f513bd6ee07ae15025a0bc74e996
SHA1

9b76282d91a675576fd886ea1e8cab250306893c
SHA256

94ae42cc58a296bb6523c80d2838b04f8e5ce90fb7b81b7d0bd283fad95fd480
SHA512

cbbac2345c89ea9c2638ee87037d7d483a8ef61e676a7257d1c630045ba92910422ea4e707d4c82b6ad62f99344bb4c2191e9647bd26eb02c4da6571bdea71a9
SSDEEP

24576:0FGW9wk3F/HJ/WYvUmAj6pSmm/wnrjwPF:lWCsPJum4mm/urk

Score

N/A

Malware Config

Signatures

Files

94ae42cc58a296bb6523c80d2838b04f8e5ce90fb7b81b7d0bd283fad95fd480
.exe windows x86

7da75146729c27b42077530711e3a9e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_heapmin
exit
_wexeclpe
islower
ispunct
strxfrm
??_7exception@@6B@
_gmtime64
??1bad_typeid@@UAE@XZ
iswupper
_Strftime
_finite
_CItan
_mbspbrk
sin
_getcwd
_CIatan
strcpy
_utime64
_spawnle
?unexpected@@YAXXZ
strerror
_wunlink
__set_app_type
__getmainargs
??4exception@@QAEAAV0@ABV0@@Z
_wcsicmp
wcsncat
__badioinfo
__p__commode
tan
_aligned_realloc
_rotr
strtok
_wchmod

kernel32

VirtualAllocEx
FindFirstVolumeMountPointW
OpenSemaphoreA
LZInit
GetOEMCP
GetLocaleInfoA
GetUserDefaultLCID
InvalidateConsoleDIBits
SetCriticalSectionSpinCount
GetFullPathNameW
QueueUserWorkItem
IsBadStringPtrW
LoadModule
GetTickCount
UpdateResourceW
BeginUpdateResourceA
CreateDirectoryW
GetQueuedCompletionStatus
InterlockedPopEntrySList
FillConsoleOutputAttribute
GetAtomNameW
GetConsoleCommandHistoryLengthW
GetCPInfoExA
SetCommConfig
CreatePipe
CreateIoCompletionPort
ExitProcess
GetSystemDirectoryW
GetStringTypeW
SetCurrentDirectoryA
VerLanguageNameA
LoadLibraryA
SetFileShortNameW
CreateSemaphoreA
GetComputerNameExA
VirtualAlloc

rastapi

DeviceGetInfo
GetZeroDeviceInfo
PortGetPortState
DeviceListen
DeviceGetDevConfig
PortSetInfo
PortEnum
DeviceSetDevConfig
PortClose
PortOpen
PortGetStatistics
PortClearStatistics
DeviceConnect
UnloadRastapiDll
DeviceEnum
PortReceive
PortInit
EnableDeviceForDialIn
PortSend
SetCommSettings
PortGetInfo
RastapiGetCalledID
PortDisconnect
DeviceWork
PortSetFraming
RemovePort
PortTestSignalState
PortCompressionSetInfo
PortReceiveComplete
PortSetIoCompletionPort
AddPorts
DeviceDone

user32

DefWindowProcW
RegisterClassW
PostQuitMessage

Sections

.text
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7da75146729c27b42077530711e3a9e0

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

rastapi

user32

Sections

.text Size: 388KB - Virtual size: 387KB

.rdata Size: 128KB - Virtual size: 128KB

.data Size: 172KB - Virtual size: 1.6MB

.rsrc Size: 146KB - Virtual size: 146KB

.reloc Size: 1024B - Virtual size: 1000B

.text
Size: 388KB - Virtual size: 387KB

.rdata
Size: 128KB - Virtual size: 128KB

.data
Size: 172KB - Virtual size: 1.6MB

.rsrc
Size: 146KB - Virtual size: 146KB

.reloc
Size: 1024B - Virtual size: 1000B