8e1caec2749716ce9bf6ab9681a163e14b902b927c046cd0b88150a12522639c

General

Target

8e1caec2749716ce9bf6ab9681a163e14b902b927c046cd0b88150a12522639c
Size

414KB
MD5

bf9150e9f6a48a4b550e0d3c95919c87
SHA1

622e56c2901a700c090ef351cc8909fdbf0f5668
SHA256

8e1caec2749716ce9bf6ab9681a163e14b902b927c046cd0b88150a12522639c
SHA512

0b2220b878f191ef2385b7cbdea9bd884222e6e6094100c282e053bd57af2b3d04f7e448a7352137bb80b3a878bc71d3c813b5f2f85f20e8eba851eae5a7c7a1
SSDEEP

12288:si1EVbounkPU7vdqvL+P2+qr1I3LZLZQT:sPFnMU4vL+M5CZLZQT

Score

N/A

Malware Config

Signatures

Files

8e1caec2749716ce9bf6ab9681a163e14b902b927c046cd0b88150a12522639c
.exe windows x86

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
VirtualAlloc
CloseHandle
Sleep
GetThreadPriority
GetProfileStringW
FindAtomW
SetUnhandledExceptionFilter
ChangeTimerQueueTimer
GetAtomNameA
GetSystemDefaultUILanguage
ord1
GetVersionExW
SetCommState
ExitProcess
_lclose
CreateEventW
GetTempPathA

msrepl40

ord2001
ord2042
ord2024
ord2041

rtutils

TraceDeregisterW
RouterLogEventStringA
TraceRegisterExA
RouterLogEventExW
LogEventW
TraceDumpExA
RouterLogEventDataA
RouterLogDeregisterW
LogEventA
TracePutsExA
RouterLogEventStringW
RouterLogRegisterA
LogErrorA
TracePrintfA
TraceDeregisterExA
TracePrintfExW
RouterLogDeregisterA
RouterLogEventW
TraceRegisterExW
LogErrorW

msvbvm60

__vbaForEachCollVar
ord690
_adj_fdiv_m32
__vbaVarDup
__vbaAptOffset
ord304
__vbaChkstk
ord520
_CItan
_allmul
ord709
__vbaGosubFree
_adj_fdiv_m32i
__vbaFreeStrList
ord647
__vbaForEachCollObj
__vbaFpR8
ord102
__vbaFileOpen
ord711

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textbs
Size: 381KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msrepl40

rtutils

msvbvm60

Sections

.text Size: 12KB - Virtual size: 11KB

.CRT Size: - Virtual size: 22KB

.textbs Size: 381KB - Virtual size: 477KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 12KB - Virtual size: 11KB

.CRT
Size: - Virtual size: 22KB

.textbs
Size: 381KB - Virtual size: 477KB

.rsrc
Size: 19KB - Virtual size: 19KB