790c25a04e0525522caf3caf2b3bf17be1d10fe825a99b6c11d92e3c637f110f

Sharing

Copy URL Twitter E-mail

General

Target

790c25a04e0525522caf3caf2b3bf17be1d10fe825a99b6c11d92e3c637f110f
Size

828KB
MD5

4d0f83281d99f9d04fd03a61dcaf0a93
SHA1

2ac5d5b7b4c8a24be5d76e8bc6df941d00e48f0f
SHA256

790c25a04e0525522caf3caf2b3bf17be1d10fe825a99b6c11d92e3c637f110f
SHA512

354ddf311fee08e7353cede1208dd2995603b04744256875ee97af5f9105e88a0a6411908b8dca3f3e5ec83124e920a2727c0ee1f86a93f40e8b4d6c7e41f34e
SSDEEP

24576:SA8ZfZkR5ls+T7QRWqo/6d3lw66B0kk7D:T7s+sowkSD

Score

N/A

Malware Config

Signatures

Files

790c25a04e0525522caf3caf2b3bf17be1d10fe825a99b6c11d92e3c637f110f
.exe windows x86

409a6df3b8d65c9f0decade1253ec562

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
CreateActCtxW
CreateFileMappingW
EnumResourceTypesA
FindNextFileA
IsDebuggerPresent
AreFileApisANSI
GetVolumeInformationA
ExitVDM
EnumResourceNamesA
QueryPerformanceCounter
SetFileShortNameA
InitAtomTable
GetCurrentThread
FindVolumeClose
OpenSemaphoreA
GetModuleHandleW
GetDiskFreeSpaceExA
GetLongPathNameA
GetTapeParameters
SetThreadPriorityBoost
SetClientTimeZoneInformation
GetDefaultCommConfigA
SetConsoleFont
lstrcmpA
GlobalWire
_llseek
GetLocaleInfoW
EnumCalendarInfoExW
GetConsoleFontSize
VirtualLock
SwitchToThread
ReadConsoleOutputCharacterW
GetSystemTimeAsFileTime
ShowConsoleCursor
GetCommTimeouts
GlobalDeleteAtom
ReplaceFileA
ClearCommBreak
UnmapViewOfFile
DosDateTimeToFileTime
RemoveDirectoryA
CreateConsoleScreenBuffer
UnlockFileEx
lstrcpyW
LoadLibraryW
SetConsoleWindowInfo
ReadConsoleInputW

ntdll

RtlIpv4StringToAddressA
RtlSetOwnerSecurityDescriptor
NtCreateSymbolicLinkObject
strncat
_fltused
NtQuerySystemEnvironmentValueEx
RtlDestroyEnvironment
NtUnloadKey
NtQueryInformationFile
ZwSecureConnectPort
CsrClientConnectToServer
RtlIpv4AddressToStringW
RtlIpv4AddressToStringA
NtOpenObjectAuditAlarm
RtlAddAuditAccessAceEx
RtlImageNtHeader
RtlxAnsiStringToUnicodeSize
NtResumeThread
ZwMapUserPhysicalPagesScatter
NtLockRegistryKey
_allshr
NtQueryInstallUILanguage
ZwIsSystemResumeAutomatic
RtlCompareString
ZwSetEventBoostPriority
RtlDeactivateActivationContextUnsafeFast
ZwOpenJobObject
NtAllocateUuids
RtlStartRXact
NtClearEvent
wcsncpy
NtResumeProcess
NtOpenSymbolicLinkObject
ZwQueryKey
NtSetQuotaInformationFile
NtCreateEvent
RtlMapSecurityErrorToNtStatus
RtlAddAccessAllowedObjectAce
RtlLargeIntegerShiftRight
NtDeleteBootEntry
NtTranslateFilePath
NtDebugContinue
_lfind

user32

OemKeyScan
CallWindowProcA
DdeClientTransaction
LoadIconA
InvalidateRect
GetForegroundWindow
KillTimer
GetMonitorInfoA
ReleaseCapture
RegisterWindowMessageW
SetDeskWallpaper
CharUpperBuffW
IsCharAlphaW
DdeQueryStringA
CheckMenuItem
CharNextW
WinHelpA
CharLowerW
MapVirtualKeyW
GetPropA

gdi32

EngDeleteClip
DdEntry39
FillRgn
GetTextFaceA
XLATEOBJ_cGetPalette
EngReleaseSemaphore
PolyPolygon
GetStringBitmapW
GetDIBits
EngDeleteSurface
DdEntry28
GdiGetCharDimensions
GdiEndDocEMF
GetRgnBox
UpdateICMRegKeyA

Sections

.text
Size: 414KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 157KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

409a6df3b8d65c9f0decade1253ec562

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

user32

gdi32

Sections

.text Size: 414KB - Virtual size: 413KB

.rdata Size: 161KB - Virtual size: 161KB

.data Size: 157KB - Virtual size: 1.5MB

.rsrc Size: 93KB - Virtual size: 92KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 414KB - Virtual size: 413KB

.rdata
Size: 161KB - Virtual size: 161KB

.data
Size: 157KB - Virtual size: 1.5MB

.rsrc
Size: 93KB - Virtual size: 92KB

.reloc
Size: 1KB - Virtual size: 1KB