5718f1acf9f04b326c04ff4272bc5292df75f4bc649a50ef10bdee4bf2e581e4

Sharing

Copy URL Twitter E-mail

General

Target

5718f1acf9f04b326c04ff4272bc5292df75f4bc649a50ef10bdee4bf2e581e4
Size

940KB
MD5

10b0c38b11f83349211845d8844c774c
SHA1

e91bbcc55b760df013530bc2b114137583b31c52
SHA256

5718f1acf9f04b326c04ff4272bc5292df75f4bc649a50ef10bdee4bf2e581e4
SHA512

e8619f07501a9c00e933181134add7a2298ad0918efd75350113b45403d27512c43963ae6f55f5d70ef164e83aebd7add18e25b068be36644ce31c26d035fe28
SSDEEP

24576:mWeWIm19/xqQ+ICQY49n5RTsDMxZO4udxE20cPUIAKqKlqev:9LnxqQZ9sDMw500Plr

Score

N/A

Malware Config

Signatures

Files

5718f1acf9f04b326c04ff4272bc5292df75f4bc649a50ef10bdee4bf2e581e4
.exe windows x86

6ee5c90ce75ad5827bbd89492070ca28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

NetLocalGroupAddMembers
DsEnumerateDomainTrustsW
NetUserChangePassword
I_NetServerReqChallenge
NetUserModalsGet
NetAlertRaiseEx
NetUseGetInfo
NetShareEnum
NetWkstaGetInfo
NetStatisticsGet
NetGroupGetInfo
NetLocalGroupEnum
NetGroupDel

msvcrt

rand
wcsstr
iswprint
_wfreopen
isupper
_CIcos
_ismbcalpha
_timezone
toupper
longjmp
_mbsnextc
memcmp
_mbsupr
_ismbblead
__setusermatherr

user32

BeginPaint
CheckMenuItem
SetWindowsHookA
EmptyClipboard
SetWindowRgn
SendNotifyMessageW
SendMessageW
MonitorFromWindow
SetKeyboardState
PtInRect

msacm32

acmStreamUnprepareHeader
acmFormatSuggest
acmFormatDetailsW
acmDriverOpen
acmStreamPrepareHeader
acmFormatChooseW
acmStreamConvert
acmGetVersion
acmMetrics
acmFormatTagDetailsW
acmStreamSize
acmStreamOpen
acmDriverEnum
acmStreamClose
acmDriverClose

advapi32

LogonUserW
GetKernelObjectSecurity
RegRestoreKeyW
AddAccessAllowedAce
InitializeSecurityDescriptor
RegSetKeySecurity
LookupPrivilegeValueW
RegisterEventSourceW
ElfDeregisterEventSource
EnumServicesStatusW

kernel32

GetSystemTime
OutputDebugStringW
GetPrivateProfileSectionW
GetVersion
SetupComm
AddAtomA
GetWindowsDirectoryW
CreateRemoteThread
VirtualAlloc
CreateConsoleScreenBuffer
EnumDateFormatsExW
GetProcessTimes
SetVolumeLabelA
EnumResourceLanguagesW
SystemTimeToFileTime
QueryInformationJobObject
ReplaceFileW
ExpandEnvironmentStringsW
GetCalendarInfoW

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 148KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 335KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 141KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 107KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ee5c90ce75ad5827bbd89492070ca28

Headers

File Characteristics

Imports

netapi32

msvcrt

user32

msacm32

advapi32

kernel32

Sections

.text Size: 85KB - Virtual size: 84KB

.idata Size: 148KB - Virtual size: 307KB

.edata Size: 335KB - Virtual size: 377KB

.rdata Size: 141KB - Virtual size: 325KB

.bss Size: 107KB - Virtual size: 149KB

.rsrc Size: 121KB - Virtual size: 121KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 85KB - Virtual size: 84KB

.idata
Size: 148KB - Virtual size: 307KB

.edata
Size: 335KB - Virtual size: 377KB

.rdata
Size: 141KB - Virtual size: 325KB

.bss
Size: 107KB - Virtual size: 149KB

.rsrc
Size: 121KB - Virtual size: 121KB

.reloc
Size: 1KB - Virtual size: 1KB