84e16605762e086f81729528abc368ec7b53539c906b7d02cc8259286bea4f4d

Sharing

Copy URL Twitter E-mail

General

Target

84e16605762e086f81729528abc368ec7b53539c906b7d02cc8259286bea4f4d
Size

431KB
MD5

a4606326088176f24afab4f5f62841b5
SHA1

b8dea7968e27317756ae7b3386fc0d8761cd48c3
SHA256

84e16605762e086f81729528abc368ec7b53539c906b7d02cc8259286bea4f4d
SHA512

9d1016d3f0075237974338a676d7e62485ebd48e553cd70a3ae1c8995b64c952e657b363b25f2c9d6f6cb0fed84dd5e583204df8364c5870ec88dd958f6e93f4
SSDEEP

12288:RVN6u1O1ucemmW7pJp5PhZEekoB3jKLcZU/ViVe:RO+4ucemmW73rzTUdm

Score

N/A

Malware Config

Signatures

Files

84e16605762e086f81729528abc368ec7b53539c906b7d02cc8259286bea4f4d
.exe windows x86

936ddfe729e65e3f9df1b145f2942c62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

QueryContextAttributesA
QueryCredentialsAttributesW
SaslAcceptSecurityContext
QueryCredentialsAttributesA
QuerySecurityPackageInfoA
UnsealMessage
AddSecurityPackageA
LsaEnumerateLogonSessions
LsaRegisterPolicyChangeNotification
InitSecurityInterfaceW
AddCredentialsA
DeleteSecurityContext
EnumerateSecurityPackagesW
SealMessage
GetSecurityUserInfo
CompleteAuthToken
SecpFreeMemory
AcquireCredentialsHandleA
ImportSecurityContextA
SaslIdentifyPackageW
DecryptMessage
SecpTranslateName
LsaLogonUser
GetComputerObjectNameA
EnumerateSecurityPackagesA
FreeCredentialsHandle
LsaDeregisterLogonProcess
DeleteSecurityPackageW
LsaCallAuthenticationPackage
RevertSecurityContext
QuerySecurityContextToken
InitializeSecurityContextA
GetUserNameExW
AcquireCredentialsHandleW
GetUserNameExA
AddSecurityPackageW
LsaRegisterLogonProcess
SaslEnumerateProfilesA
ImportSecurityContextW
AddCredentialsW
TranslateNameW
SaslIdentifyPackageA

wsock32

GetServiceW
SetServiceW
WSAAsyncGetHostByAddr
GetAddressByNameW
GetNameByTypeW
GetTypeByNameW
inet_addr
socket
ioctlsocket
send
recv
WSAGetLastError
getsockopt
WSAUnhookBlockingHook
EnumProtocolsA
WSAAsyncSelect
listen
WSApSetPostRoutine
EnumProtocolsW
dn_expand
inet_ntoa
select
WSAAsyncGetProtoByName
WSARecvEx
GetNameByTypeA
getprotobyname
ntohs
WSAIsBlocking
NPLoadNameSpaces
SetServiceA
WSASetBlockingHook
WSAAsyncGetServByName
gethostbyname
TransmitFile
WSACancelBlockingCall
getprotobynumber
gethostname
WSAAsyncGetServByPort
htons
WSACancelAsyncRequest
MigrateWinsockConfiguration
getpeername
closesocket
getsockname
setsockopt
sendto
GetAcceptExSockaddrs

d3d8

ValidateVertexShader
Direct3DCreate8
DebugSetMute

msxbde40

DllRegisterServer
DllUnregisterServer

ntlanman

NPCancelConnection
NPGetConnection3
NPCloseEnum
NPOpenEnum
NPEnumResource
NPAddConnection
NPGetCaps
DllMain
I_SystemFocusDialog
NPAddConnection3
NPGetReconnectFlags
NPGetUniversalName
NPGetConnectionPerformance
NPGetResourceParent
NPFormatNetworkName
NPGetUser
NPGetResourceInformation
NPGetConnection

dsauth

StoreSetSearchOneLevel
DhcpEnumServersDS
DhcpDsValidateService
DhcpDsGetLists
StoreSetSearchSubTree
StoreSearchGetNext
DhcpAddServerDS
DhcpDsSetLists
StoreCreateObjectVA
StoreCollectAttributes
DhcpDeleteServerDS
StoreBeginSearch
DhcpDsCleanupDS
DhcpDsDelServer
DhcpDsEnumServers
StoreDeleteObject
DhcpDsGetRoot
StoreGetHandle
DhcpDsAddServer
DhcpDsGetAttribs
StoreEndSearch
StoreCleanupHandle
StoreInitHandle
DhcpDsInitDS

kernel32

ReadFile
EndUpdateResourceW
BuildCommDCBAndTimeoutsA
RequestDeviceWakeup
GetDiskFreeSpaceExA
SetFileAttributesA
GetModuleHandleA
MoveFileWithProgressW
SetConsoleCursorInfo
FoldStringA
GetThreadContext
GetProfileStringW
GetStartupInfoW
SetDefaultCommConfigW
ScrollConsoleScreenBufferW
Heap32ListFirst
SetErrorMode
Module32First
SetTermsrvAppInstallMode
SetLastConsoleEventActive
RegisterWaitForSingleObject
GetVolumePathNameW
SetConsoleNlsMode
GetProcAddress
BeginUpdateResourceW
CreateSemaphoreW
OpenJobObjectW
SetThreadPriorityBoost
MapUserPhysicalPagesScatter
GetThreadTimes
WriteConsoleA
VirtualAlloc
EnumLanguageGroupLocalesW
LoadLibraryA

w32topl

ToplListNumberOfElements
ToplVertexGetParent
ToplGraphFree
ToplEdgeGetWeight
ToplHeapIsEmpty
ToplEdgeFree
ToplEdgeSetFromVertex
ToplVertexCreate
ToplIterFree
ToplEdgeInit
ToplListCreate
ToplIsToplException
ToplEdgeSetWeight
ToplEdgeCreate
ToplGraphAddVertex
ToplEdgeDisassociate
ToplHeapInsert
ToplListRemoveElem
ToplFree
ToplVertexSetId
ToplSetAllocator
ToplVertexSetParent
ToplGraphSetVertexIter
ToplVertexGetId
ToplHeapCreate
ToplGraphNumberOfVertices
ToplHeapExtractMin
ToplListFree
ToplIterGetObject
ToplGraphRemoveVertex
ToplListSetIter
ToplVertexGetInEdge
ToplVertexFree
ToplVertexDestroy
ToplVertexNumberOfInEdges
ToplHeapIsElementOf
ToplListAddElem
ToplIterAdvance
ToplVertexGetOutEdge
ToplGraphMakeRing
ToplEdgeDestroy
ToplGraphCreate
ToplGraphDestroy
ToplIterCreate
ToplEdgeSetToVertex
ToplHeapDestroy
ToplGraphInit
ToplVertexInit
ToplGraphFindEdgesForMST

msafd

WSPStartup

opengl32

glRasterPos2iv
glTexCoord3d
glGetFloatv
glVertex4d
glTranslatef
glPixelZoom
wglGetLayerPaletteEntries
glGetPixelMapuiv
glIndexMask
glIndexiv
glTexParameterfv
glMapGrid2d
glVertex4f
glNormal3i
glCopyTexSubImage1D
glViewport
glTexCoord2dv
glRasterPos2fv
glGetTexParameterfv
glTexCoord2fv
glGetClipPlane
glColor4f
glTexCoord4f
glPixelMapuiv
glTexCoord4d
glAccum
glFogfv
glVertex4i
glRectiv
glRenderMode
glColor3d
glRasterPos3i
glNormal3dv
glTexCoord2f
GlmfInitPlayback
glColorMask
glTexGeniv
glTexEnvfv
glColor4ub
glEvalCoord1f
glBindTexture
glRasterPos4d
glDisable
glRasterPos4fv
glVertex4dv
glGetTexLevelParameterfv

crtdll

_CIlog10

mspatcha

GetFilePatchSignatureW
ApplyPatchToFileW
TestApplyPatchToFileByHandles
ApplyPatchToFileExW
ApplyPatchToFileByHandles
ApplyPatchToFileA
GetFilePatchSignatureA
ApplyPatchToFileByHandlesEx
ApplyPatchToFileExA
TestApplyPatchToFileW
TestApplyPatchToFileA

Sections

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

936ddfe729e65e3f9df1b145f2942c62

Headers

File Characteristics

Imports

secur32

wsock32

d3d8

msxbde40

ntlanman

dsauth

kernel32

w32topl

msafd

opengl32

crtdll

mspatcha

Sections

.rdata Size: 21KB - Virtual size: 20KB

.data Size: - Virtual size: 2.0MB

.text Size: 407KB - Virtual size: 407KB

.rsrc Size: 2KB - Virtual size: 1KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: - Virtual size: 2.0MB

.text
Size: 407KB - Virtual size: 407KB

.rsrc
Size: 2KB - Virtual size: 1KB