89ae2ba090ba3d7a2d4898b45c37431accd46b608034428b2665660a367d01df

Sharing

Copy URL Twitter E-mail

General

Target

89ae2ba090ba3d7a2d4898b45c37431accd46b608034428b2665660a367d01df
Size

832KB
MD5

7771f1e66cd84c59e01afc92760f5822
SHA1

162130108fd1cc215043d2c96b43fbfa14ed177d
SHA256

89ae2ba090ba3d7a2d4898b45c37431accd46b608034428b2665660a367d01df
SHA512

08c855149537ebf9e8708744cc9b3a589d3da34907ed1149766d66ccbf3adb92f12e0ad95cdb6177002487dea0ea0b9aa08b0a675fc3b51b740b4d0effc5d7e2
SSDEEP

24576:LLtTvPCZaYWmNxwWSHMgHvRjsXxRmMXn:PtTvfNgwWSbwR

Score

N/A

Malware Config

Signatures

Files

89ae2ba090ba3d7a2d4898b45c37431accd46b608034428b2665660a367d01df
.exe windows x86

5d9f8686112e9a384e875a46717d6021

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DeferWindowPos
SendMessageCallbackW
RegisterTasklist
MapVirtualKeyExW
GetMenuContextHelpId
CharToOemBuffW
SendDlgItemMessageW
SendMessageA
GetWindowDC
GetMenuDefaultItem
wsprintfA
SetTaskmanWindow
IsCharAlphaNumericA
InvertRect
SetWindowLongW
KillTimer
SetMenuContextHelpId

davclnt

DavGetDiskSpaceUsage
NPGetConnection
NPAddConnection3
NPEnumResource
DllMain
NPAddConnection
NPFormatNetworkName
NPGetResourceInformation

rasman

RasSendCreds
RasPortBundle
RasGetHportFromConnection
RasGetConnectionParams
RasGetConnectionUserData
RasGetHConnFromEntry
RasGetInfo
RasGetDeviceName
RasGetEapUserInfo
RasAddConnectionPort
RasGetNumPortOpen

kernel32

LoadLibraryA
SetHandleInformation
GetShortPathNameA
QueryDepthSList
GetSystemTimeAsFileTime
SetComputerNameA
LocalAlloc
GetThreadContext
EnumCalendarInfoW
CreateConsoleScreenBuffer
GetTimeZoneInformation
IsValidCodePage
lstrcatA
GetStartupInfoA
GetThreadTimes

atmlib

ATMAddFontEx
ATMGetPostScriptName
ATMEnumFonts
ATMGetBuildStrA
ATMRemoveSubstFontW

Sections

.text
Size: 378KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 181KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d9f8686112e9a384e875a46717d6021

Headers

DLL Characteristics

File Characteristics

Imports

user32

davclnt

rasman

kernel32

atmlib

Sections

.text Size: 378KB - Virtual size: 377KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 181KB - Virtual size: 1.6MB

.rsrc Size: 151KB - Virtual size: 150KB

.reloc Size: 1024B - Virtual size: 960B

.text
Size: 378KB - Virtual size: 377KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 181KB - Virtual size: 1.6MB

.rsrc
Size: 151KB - Virtual size: 150KB

.reloc
Size: 1024B - Virtual size: 960B