68a02c0bda059ab819930d78b8c4e88b68fd4519bb7ef1dd45522c1dea632c66

General

Target

68a02c0bda059ab819930d78b8c4e88b68fd4519bb7ef1dd45522c1dea632c66
Size

811KB
MD5

7411ff5f1ed7cb4456db8b33d88c60b0
SHA1

bff6318542d3bbfc1fae8365c6c8487e4d332960
SHA256

68a02c0bda059ab819930d78b8c4e88b68fd4519bb7ef1dd45522c1dea632c66
SHA512

8994c15bfa44fb7f0030d8e4c6a312d91578707df3079660e3d4f4cf39286dcd509c3df35f218a0546073cc6ab83c9f8e774342d5e0fbcf01bc3718e95c95663
SSDEEP

12288:gkdwmE0AwV1dyqDLgY3xV1rLzbIY54HJYuHCo+QwecWniofybhj9XqdW6Bhfi2K:ddwmE0A4tEQxnJ+ifQwec1ofK+W6G

Score

N/A

Malware Config

Signatures

Files

68a02c0bda059ab819930d78b8c4e88b68fd4519bb7ef1dd45522c1dea632c66
.exe windows x86

fea4ad19146f3f0d4593cd7790a8e520

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHBrowseForFolderA
ShellAboutA
SHGetFolderPathA
Shell_NotifyIconW
ExtractIconA
FindExecutableA

kernel32

GetDiskFreeSpaceExA
SetCommState
InitializeCriticalSectionAndSpinCount
SetProcessAffinityMask
LoadLibraryA
GetThreadLocale
GetFileInformationByHandle
GetSystemDirectoryA
LoadResource
GetNamedPipeHandleStateA
Sleep
EnumSystemLanguageGroupsA
GetCurrentProcess
VirtualAlloc
OpenJobObjectW
FindFirstFileW

dnsapi

DnsQueryConfig
DnsReplaceRecordSetUTF8
DnsDhcpSrvRegisterTerm
DnsDhcpSrvRegisterInit
DnsQuery_W
DnsNameCompare_W
DnsStatusString
DnsValidateName_UTF8
DnsNotifyResolver
DnsQuery_UTF8
DnsNameCompareEx_W
DnsModifyRecordsInSet_UTF8
DnsValidateName_W
DnsRecordListFree

netapi32

NetWkstaUserEnum
NetShareAdd
NetUseEnum
NetUserModalsGet
DsEnumerateDomainTrustsW
NetQueryDisplayInformation
NetGetJoinInformation
NetServiceEnum

advapi32

RegDeleteValueW
AreAllAccessesGranted
ReportEventA
GetSidLengthRequired
LsaLookupNames
AddAuditAccessAce
RegNotifyChangeKeyValue
GetTraceEnableFlags
AreAnyAccessesGranted
OpenTraceW
AddAccessDeniedAce
RegFlushKey
QueryServiceStatusEx

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mm
Size: 643KB - Virtual size: 1013KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fea4ad19146f3f0d4593cd7790a8e520

Headers

File Characteristics

Imports

shell32

kernel32

dnsapi

netapi32

advapi32

Sections

.text Size: 45KB - Virtual size: 44KB

.mm Size: 643KB - Virtual size: 1013KB

.rsrc Size: 121KB - Virtual size: 121KB

.reloc Size: 512B - Virtual size: 510B

.text
Size: 45KB - Virtual size: 44KB

.mm
Size: 643KB - Virtual size: 1013KB

.rsrc
Size: 121KB - Virtual size: 121KB

.reloc
Size: 512B - Virtual size: 510B