37ec037c179a3db927add3d3d7a679fe6c5049455776c1b201eaac44e7313109

General

Target

37ec037c179a3db927add3d3d7a679fe6c5049455776c1b201eaac44e7313109
Size

948KB
MD5

28a9e94a610c5ec44188c250cf1613b0
SHA1

299abdf9bba033e7f2b9ac12b2fe0c3d4705c1bb
SHA256

37ec037c179a3db927add3d3d7a679fe6c5049455776c1b201eaac44e7313109
SHA512

36e17f2a4c3fea3546b1b229e39dafafd53cbef6d690ed7d4b74a520dfd14a7b062b163d8fef81f0354ca54d960f1a5bf449df1286d1c1d8f1d96adf55acc88e
SSDEEP

24576:VM7A0G7ApHHprhQxzft4EG0cAAnYp73kntbbDwC:VyyG0knYSPDw

Score

N/A

Malware Config

Signatures

Files

37ec037c179a3db927add3d3d7a679fe6c5049455776c1b201eaac44e7313109
.exe windows x86

6f7e99564e79ff2f0731cf61411f560f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

WmiOpenBlock
SetFileSecurityW
CreatePrivateObjectSecurity
RegSetValueExW
CryptSetKeyParam
RegConnectRegistryA
RegNotifyChangeKeyValue

tapi32

lineInitializeExW
lineGetDevConfigA
tapiGetLocationInfoW
lineInitialize
lineMakeCall
lineGetCountry

userenv

GetProfileType
GetUserProfileDirectoryW
GetAllUsersProfileDirectoryW
DestroyEnvironmentBlock

kernel32

BeginUpdateResourceW
OpenJobObjectA
VirtualAlloc
SetCommState
WriteProcessMemory
GlobalAlloc
FindNextVolumeW
BackupWrite
GetSystemWindowsDirectoryA
GetCommandLineA

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 311KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 295KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 148KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f7e99564e79ff2f0731cf61411f560f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

tapi32

userenv

kernel32

Sections

.text Size: 151KB - Virtual size: 151KB

.rdata Size: 311KB - Virtual size: 526KB

.data Size: 295KB - Virtual size: 433KB

.edata Size: 148KB - Virtual size: 189KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 151KB - Virtual size: 151KB

.rdata
Size: 311KB - Virtual size: 526KB

.data
Size: 295KB - Virtual size: 433KB

.edata
Size: 148KB - Virtual size: 189KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 2KB - Virtual size: 2KB