8346071ed4b616f047ccf987394204c4eaa37c0ea3c0d32ec93d0205576a2e7d

Sharing

Copy URL Twitter E-mail

General

Target

8346071ed4b616f047ccf987394204c4eaa37c0ea3c0d32ec93d0205576a2e7d
Size

940KB
MD5

a58c9fb87d2789b3baaf0a1c023e0132
SHA1

ebeb22fcb25bd1a8c3155ce571cb28bb28753fca
SHA256

8346071ed4b616f047ccf987394204c4eaa37c0ea3c0d32ec93d0205576a2e7d
SHA512

0e9dabf93916c0502f408a3915908dc44a938df0e9ec5047d1390b83b92525607b34a56b9c474007742286b1884d951d1743e0ffd138473cb461cab067d8d48a
SSDEEP

24576:gWeWIm19/xqQ+ICQY49n5RTsDMxZO4udxE20cPUIAKqKlqeb:zLnxqQZ9sDMw500PlH

Score

N/A

Malware Config

Signatures

Files

8346071ed4b616f047ccf987394204c4eaa37c0ea3c0d32ec93d0205576a2e7d
.exe windows x86

6ee5c90ce75ad5827bbd89492070ca28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

NetLocalGroupAddMembers
DsEnumerateDomainTrustsW
NetUserChangePassword
I_NetServerReqChallenge
NetUserModalsGet
NetAlertRaiseEx
NetUseGetInfo
NetShareEnum
NetWkstaGetInfo
NetStatisticsGet
NetGroupGetInfo
NetLocalGroupEnum
NetGroupDel

msvcrt

rand
wcsstr
iswprint
_wfreopen
isupper
_CIcos
_ismbcalpha
_timezone
toupper
longjmp
_mbsnextc
memcmp
_mbsupr
_ismbblead
__setusermatherr

user32

BeginPaint
CheckMenuItem
SetWindowsHookA
EmptyClipboard
SetWindowRgn
SendNotifyMessageW
SendMessageW
MonitorFromWindow
SetKeyboardState
PtInRect

msacm32

acmStreamUnprepareHeader
acmFormatSuggest
acmFormatDetailsW
acmDriverOpen
acmStreamPrepareHeader
acmFormatChooseW
acmStreamConvert
acmGetVersion
acmMetrics
acmFormatTagDetailsW
acmStreamSize
acmStreamOpen
acmDriverEnum
acmStreamClose
acmDriverClose

advapi32

LogonUserW
GetKernelObjectSecurity
RegRestoreKeyW
AddAccessAllowedAce
InitializeSecurityDescriptor
RegSetKeySecurity
LookupPrivilegeValueW
RegisterEventSourceW
ElfDeregisterEventSource
EnumServicesStatusW

kernel32

GetSystemTime
OutputDebugStringW
GetPrivateProfileSectionW
GetVersion
SetupComm
AddAtomA
GetWindowsDirectoryW
CreateRemoteThread
VirtualAlloc
CreateConsoleScreenBuffer
EnumDateFormatsExW
GetProcessTimes
SetVolumeLabelA
EnumResourceLanguagesW
SystemTimeToFileTime
QueryInformationJobObject
ReplaceFileW
ExpandEnvironmentStringsW
GetCalendarInfoW

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 148KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 335KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 141KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 107KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ee5c90ce75ad5827bbd89492070ca28

Headers

File Characteristics

Imports

netapi32

msvcrt

user32

msacm32

advapi32

kernel32

Sections

.text Size: 85KB - Virtual size: 84KB

.idata Size: 148KB - Virtual size: 307KB

.edata Size: 335KB - Virtual size: 377KB

.rdata Size: 141KB - Virtual size: 325KB

.bss Size: 107KB - Virtual size: 149KB

.rsrc Size: 121KB - Virtual size: 121KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 85KB - Virtual size: 84KB

.idata
Size: 148KB - Virtual size: 307KB

.edata
Size: 335KB - Virtual size: 377KB

.rdata
Size: 141KB - Virtual size: 325KB

.bss
Size: 107KB - Virtual size: 149KB

.rsrc
Size: 121KB - Virtual size: 121KB

.reloc
Size: 1KB - Virtual size: 1KB