a908892f0cc1189cf64bb01e5a73b3bcc6c3adb13cb4fef1e8e0662d06ae21fe

Sharing

Copy URL

Twitter E-mail

General

Target

a908892f0cc1189cf64bb01e5a73b3bcc6c3adb13cb4fef1e8e0662d06ae21fe
Size

2.2MB
MD5

0b8d797372ce582abfa92f26647db108
SHA1

1034a05897c78d15cd352cdf7b5b351aaec42e3f
SHA256

a908892f0cc1189cf64bb01e5a73b3bcc6c3adb13cb4fef1e8e0662d06ae21fe
SHA512

64a6867063c2a67e82a11e43ca24e5371b65f2d06804b372af70503870c82c2f4ceeaf98d7ce95c40fbe7af6ab4a1d97b600e3c351cc29b1b0b783959c905bf2
SSDEEP

49152:QPqLH7TW9u9uz+jFJqkQjGbqHscNPerNwJEU5LMjlmrHWXBNy:+AbpxJWpHIqGU1MjlmrSy

Score

N/A

Malware Config

Signatures

Files

a908892f0cc1189cf64bb01e5a73b3bcc6c3adb13cb4fef1e8e0662d06ae21fe
.exe windows x86

0727f5da12cd50ba3a482141c94c576a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACloseEvent
WSAConnect
WSAAddressToStringA
WSACreateEvent
WSAWaitForMultipleEvents
WSAEnumNetworkEvents

userenv

EnterCriticalPolicySection
UnloadUserProfile
DeleteProfileA
CreateEnvironmentBlock
DestroyEnvironmentBlock

winmm

waveInClose
timeBeginPeriod
timeEndPeriod
waveInAddBuffer
waveInOpen
waveInStop
waveInStart

mpr

WNetAddConnection2A
WNetGetUniversalNameA
WNetGetUserA

netapi32

NetWkstaGetInfo
NetApiBufferFree
NetGetAnyDCName

comdlg32

GetFileTitleA
ChooseFontA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

comctl32

ImageList_Remove
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_Write
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Destroy

kernel32

GetACP
GetCPInfo
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetOEMCP
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
GetCurrentProcess
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
SetSystemPowerState
GetProcessHeap
GetLocalTime
CreateFileA
WriteConsoleW
VirtualProtect
GetEnvironmentVariableA
lstrcmpiA
ExitProcess
TerminateProcess

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 548KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0727f5da12cd50ba3a482141c94c576a

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

userenv

winmm

mpr

netapi32

comdlg32

comctl32

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 236KB - Virtual size: 236KB

.data Size: 548KB - Virtual size: 2.2MB

.idata Size: 4KB - Virtual size: 4KB

.tls Size: 4KB - Virtual size: 4KB

.rsrc Size: 32KB - Virtual size: 30KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 236KB - Virtual size: 236KB

.data
Size: 548KB - Virtual size: 2.2MB

.idata
Size: 4KB - Virtual size: 4KB

.tls
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 32KB - Virtual size: 30KB