6d893222749e6ec7018c4a89594096d7814b9735ddb945a2b7bc7877a6476a1c

General

Target

6d893222749e6ec7018c4a89594096d7814b9735ddb945a2b7bc7877a6476a1c
Size

538KB
MD5

02e6b859c44359acf6ba5df68b3b8da0
SHA1

0881d6f3f3ec790d5f1220133fcf8ba09796265b
SHA256

6d893222749e6ec7018c4a89594096d7814b9735ddb945a2b7bc7877a6476a1c
SHA512

a3278592964c240e14810ec5697d09f58414abd16ff511bcea464ba2cb38f6210037a7de678443cfd0862d7169e17a7aaacaa3de8eca739b49f20e6e99cfdd10
SSDEEP

12288:aoeP6zNsENfuoT72fHKWOIeZz+HXhNtGfW:aFP6zaH9ZvtcW

Score

N/A

Malware Config

Signatures

Files

6d893222749e6ec7018c4a89594096d7814b9735ddb945a2b7bc7877a6476a1c
.exe windows x86

55ef006dc452584a4e702ccb6595bc76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

tapi32

lineConfigDialogW
phoneGetData
lineGetDevCaps
lineGetDevCapsW

imagehlp

ImageNtHeader
SymSetOptions
ImageRvaToSection
ImageUnload
ImageLoad
SymInitialize
ImageRvaToVa

advapi32

RegQueryValueExA
EqualPrefixSid
TraceMessage
AddAccessAllowedAce
AccessCheck
RegQueryInfoKeyA
GetSidLengthRequired
CryptImportKey
CryptDeriveKey

kernel32

SetDefaultCommConfigW
EnumResourceLanguagesA
DnsHostnameToComputerNameW
GetVersion
EnumCalendarInfoW
VirtualAlloc
EnumResourceTypesA
DeleteVolumeMountPointA
EnumLanguageGroupLocalesW
EnumResourceLanguagesW
ResumeThread
LoadLibraryA
EnumLanguageGroupLocalesA
EnumDateFormatsW
DeviceIoControl
DnsHostnameToComputerNameA
DeleteTimerQueueEx
CreateMailslotW
EnumTimeFormatsW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 263KB - Virtual size: 343KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 226KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55ef006dc452584a4e702ccb6595bc76

Headers

DLL Characteristics

File Characteristics

Imports

tapi32

imagehlp

advapi32

kernel32

Sections

.text Size: 9KB - Virtual size: 8KB

INIT Size: 263KB - Virtual size: 343KB

BSS Size: 226KB - Virtual size: 408KB

.rsrc Size: 39KB - Virtual size: 38KB

.text
Size: 9KB - Virtual size: 8KB

INIT
Size: 263KB - Virtual size: 343KB

BSS
Size: 226KB - Virtual size: 408KB

.rsrc
Size: 39KB - Virtual size: 38KB