8b10141409c1e904056421f8b12dba07d19e942c10d79b27372c5061b078d447

General

Target

8b10141409c1e904056421f8b12dba07d19e942c10d79b27372c5061b078d447
Size

714KB
MD5

8ce7324b07e93fb1bc5296d4addc8ce6
SHA1

741969a7e915aa7ebba9da632639e8bb30c6205e
SHA256

8b10141409c1e904056421f8b12dba07d19e942c10d79b27372c5061b078d447
SHA512

a0c076d9a23c3c697ae24dd70af72ae1726720606d899b71a7f7ba8654c447aa32319e9e2257e5ff753e9ceed27c3c1564ffaf75e0641a379dee1e72600b1853
SSDEEP

12288:6rVW/9zBP3vA5LIc3yQe1f6v+FzXABF9FSebp+t:8WzJ3Y5kIyX1fc6kB3FnV+

Score

N/A

Malware Config

Signatures

Files

8b10141409c1e904056421f8b12dba07d19e942c10d79b27372c5061b078d447
.exe windows x86

a9adfbd7c313186c6fe962f8bd9f750d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

OpenSCManagerW
CryptDecrypt
RegConnectRegistryW
CryptAcquireContextW
EnumDependentServicesA
RegSetValueExW
SystemFunction036
SetTokenInformation
GetSidSubAuthority
RegisterTraceGuidsA

dnsapi

DnsReplaceRecordSetUTF8
DnsNotifyResolver
DnsStatusString
DnsQueryConfig
DnsRecordListFree
DnsDhcpSrvRegisterInit
DnsQuery_UTF8
DnsDhcpSrvRegisterTerm
DnsNameCompare_W
DnsQuery_W
DnsNameCompareEx_W
DnsModifyRecordsInSet_UTF8
DnsValidateName_UTF8
DnsValidateName_W

kernel32

GetDefaultCommConfigW
VirtualAlloc
CreateMutexA
OpenFile
GetSystemInfo
GetDevicePowerState
ClearCommBreak
FillConsoleOutputCharacterA
GetTempPathW
WriteProfileStringW
InterlockedDecrement
GlobalDeleteAtom
GetProcAddress
GetSystemDirectoryW
EnumResourceLanguagesW
SetConsoleCtrlHandler
GetSystemDefaultLangID
GetVolumePathNameA
WaitForMultipleObjects
FlushInstructionCache
FoldStringA
RemoveDirectoryA
InterlockedIncrement

netapi32

NetJoinDomain
DsGetDcNameW
NetApiBufferFree
I_NetServerSetServiceBitsEx
NetUseGetInfo
NetUserModalsGet
NetServiceEnum

comctl32

ImageList_DrawEx
ImageList_GetImageCount
ImageList_SetIconSize
PropertySheetA
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_SetOverlayImage
ImageList_Draw
ImageList_DrawIndirect

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 545KB - Virtual size: 874KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9adfbd7c313186c6fe962f8bd9f750d

Headers

File Characteristics

Imports

advapi32

dnsapi

kernel32

netapi32

comctl32

Sections

.text Size: 7KB - Virtual size: 6KB

DATA Size: 545KB - Virtual size: 874KB

.rsrc Size: 160KB - Virtual size: 159KB

.reloc Size: 512B - Virtual size: 44B

.text
Size: 7KB - Virtual size: 6KB

DATA
Size: 545KB - Virtual size: 874KB

.rsrc
Size: 160KB - Virtual size: 159KB

.reloc
Size: 512B - Virtual size: 44B