899ffc81c5c618df5f2b580f2f2a39d146741358b50fbe7d5c0c1a055c78196a

Sharing

Copy URL Twitter E-mail

General

Target

899ffc81c5c618df5f2b580f2f2a39d146741358b50fbe7d5c0c1a055c78196a
Size

940KB
MD5

d786237ca2120c0e181638abbb718643
SHA1

cc0935aa15fbaed1304cb0f5ed4d42efa9df9b98
SHA256

899ffc81c5c618df5f2b580f2f2a39d146741358b50fbe7d5c0c1a055c78196a
SHA512

44931e84f1ae9437043b2bfcf9cb38fa72316e69965118c6f2abdd19ed69854dced1320be03a8c21005c844bbcc987a5f81ea19d29b1d57cdef84bff85543372
SSDEEP

24576:PWeWIm19/xqQ+ICQY49n5RTsDMxZO4udxE20cPUIAKqKlqer:CLnxqQZ9sDMw500PlX

Score

N/A

Malware Config

Signatures

Files

899ffc81c5c618df5f2b580f2f2a39d146741358b50fbe7d5c0c1a055c78196a
.exe windows x86

6ee5c90ce75ad5827bbd89492070ca28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

NetLocalGroupAddMembers
DsEnumerateDomainTrustsW
NetUserChangePassword
I_NetServerReqChallenge
NetUserModalsGet
NetAlertRaiseEx
NetUseGetInfo
NetShareEnum
NetWkstaGetInfo
NetStatisticsGet
NetGroupGetInfo
NetLocalGroupEnum
NetGroupDel

msvcrt

rand
wcsstr
iswprint
_wfreopen
isupper
_CIcos
_ismbcalpha
_timezone
toupper
longjmp
_mbsnextc
memcmp
_mbsupr
_ismbblead
__setusermatherr

user32

BeginPaint
CheckMenuItem
SetWindowsHookA
EmptyClipboard
SetWindowRgn
SendNotifyMessageW
SendMessageW
MonitorFromWindow
SetKeyboardState
PtInRect

msacm32

acmStreamUnprepareHeader
acmFormatSuggest
acmFormatDetailsW
acmDriverOpen
acmStreamPrepareHeader
acmFormatChooseW
acmStreamConvert
acmGetVersion
acmMetrics
acmFormatTagDetailsW
acmStreamSize
acmStreamOpen
acmDriverEnum
acmStreamClose
acmDriverClose

advapi32

LogonUserW
GetKernelObjectSecurity
RegRestoreKeyW
AddAccessAllowedAce
InitializeSecurityDescriptor
RegSetKeySecurity
LookupPrivilegeValueW
RegisterEventSourceW
ElfDeregisterEventSource
EnumServicesStatusW

kernel32

GetSystemTime
OutputDebugStringW
GetPrivateProfileSectionW
GetVersion
SetupComm
AddAtomA
GetWindowsDirectoryW
CreateRemoteThread
VirtualAlloc
CreateConsoleScreenBuffer
EnumDateFormatsExW
GetProcessTimes
SetVolumeLabelA
EnumResourceLanguagesW
SystemTimeToFileTime
QueryInformationJobObject
ReplaceFileW
ExpandEnvironmentStringsW
GetCalendarInfoW

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 148KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 335KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 141KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 107KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ee5c90ce75ad5827bbd89492070ca28

Headers

File Characteristics

Imports

netapi32

msvcrt

user32

msacm32

advapi32

kernel32

Sections

.text Size: 85KB - Virtual size: 84KB

.idata Size: 148KB - Virtual size: 307KB

.edata Size: 335KB - Virtual size: 377KB

.rdata Size: 141KB - Virtual size: 325KB

.bss Size: 107KB - Virtual size: 149KB

.rsrc Size: 121KB - Virtual size: 121KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 85KB - Virtual size: 84KB

.idata
Size: 148KB - Virtual size: 307KB

.edata
Size: 335KB - Virtual size: 377KB

.rdata
Size: 141KB - Virtual size: 325KB

.bss
Size: 107KB - Virtual size: 149KB

.rsrc
Size: 121KB - Virtual size: 121KB

.reloc
Size: 1KB - Virtual size: 1KB