a2b8a26714776ea5bad46d1381f2e2eb377b551d00f012ce6208c8ead2ff7819

Sharing

Copy URL Twitter E-mail

General

Target

a2b8a26714776ea5bad46d1381f2e2eb377b551d00f012ce6208c8ead2ff7819
Size

322KB
MD5

9ed4ad1a26aa16aa4dd82ac9b785643e
SHA1

2e82d77cb7e6e88c5770f9ead1a80f3c50231bdc
SHA256

a2b8a26714776ea5bad46d1381f2e2eb377b551d00f012ce6208c8ead2ff7819
SHA512

53f9bb5aafcf9d394e0f728392a5ebc5bcca98f630a856ca6697af2a4776dd9e799e3aac43e327b66a0c1ba446bf8124eb8f04c8238e8f708cfcb284790d4746
SSDEEP

6144:zM4usNxpqLpbeikv6nCl2+2f23vDGhDWqJU5h5ql04vw+dWI:zMe+kv60cfiLG5Iz5Z4vwKWI

Score

N/A

Malware Config

Signatures

Files

a2b8a26714776ea5bad46d1381f2e2eb377b551d00f012ce6208c8ead2ff7819
.exe windows x86

6070b8ee200fae755374c3f846053445

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardSetAttrib
SCardState
SCardStatusW
SCardLocateCardsA
SCardIntroduceReaderGroupW
SCardIsValidContext
SCardListReaderGroupsW
SCardListReadersW
SCardTransmit
SCardLocateCardsByATRW
SCardLocateCardsW
SCardReconnect
SCardReleaseContext
SCardReleaseStartedEvent
SCardRemoveReaderFromGroupW

sensapi

IsNetworkAlive

sisbkup

SisRestoredCommonStoreFile
SisCSFilesToBackupForLink
SisRestoredLink

kernel32

GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
RtlUnwind
GetLocaleInfoW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
GetStringTypeW
LCMapStringW
HeapReAlloc
IsProcessorFeaturePresent
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCommandLineW
SetSystemPowerState
GetCPInfo
MoveFileExW
GetCurrentProcessId
LoadLibraryW
ExitProcess
WideCharToMultiByte
GetFileTime
GetModuleFileNameW
CreateProcessW
SetFileAttributesW
SetTapeParameters
VirtualProtect
GetSystemInfo
HeapAlloc
GetProcessHeap
GetTimeFormatW
GetDateFormatW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
GetProcAddress
HeapFree
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
HeapDestroy

Sections

.text
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6070b8ee200fae755374c3f846053445

Headers

DLL Characteristics

File Characteristics

Imports

winscard

sensapi

sisbkup

kernel32

Sections

.text Size: 258KB - Virtual size: 257KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 19KB - Virtual size: 249KB

.text
Size: 258KB - Virtual size: 257KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 19KB - Virtual size: 249KB