78a2a43b8876ca7b7fb03cfaa44c519a6bf74d1a798f716755da834c920f560a

Sharing

Copy URL

Twitter E-mail

General

Target

78a2a43b8876ca7b7fb03cfaa44c519a6bf74d1a798f716755da834c920f560a
Size

843KB
MD5

f02f8f532a5ad432e4405033e8da13e6
SHA1

cc79d236d388defa31f3eeedd00038a9680a572c
SHA256

78a2a43b8876ca7b7fb03cfaa44c519a6bf74d1a798f716755da834c920f560a
SHA512

798a73cbea55e7f1c01869fa21dac2a8982a20569b4f5d50a2bc8608a769df05938e3caef748b87fac2a62316cd9bb1fb9344c9db47885c81c8e60b3b9bfedcc
SSDEEP

24576:S+rH7lxWaLGxBRzqMQPtljK58HIocgDd:/izqMXk

Score

N/A

Malware Config

Signatures

Files

78a2a43b8876ca7b7fb03cfaa44c519a6bf74d1a798f716755da834c920f560a
.exe windows x86

ff2520dd2e2b50e8ee8322c8f6dd9c64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RequestDeviceWakeup
OpenSemaphoreA
HeapSetInformation
GetTapeStatus
VirtualAlloc
VerLanguageNameW
OutputDebugStringA
FatalAppExitW
HeapLock
AllocateUserPhysicalPages
LoadLibraryA
CreateFileMappingA
WaitCommEvent
GetCurrentThreadId
BuildCommDCBAndTimeoutsW
GetModuleHandleA
SuspendThread
BaseDumpAppcompatCache
DebugSetProcessKillOnExit
LZInit
SetThreadUILanguage
GetStringTypeW

iphlpapi

GetTcpStatistics
NTTimeToNTPTime
InternalGetIpForwardTable
_PfBindInterfaceToIPAddress@12
GetAdaptersAddresses
IpRenewAddress
GetBestRoute
_PfAddFiltersToInterface@24
GetUdpStatistics
SetTcpEntry
do_echo_rep
UnenableRouter
IcmpSendEcho
InternalGetTcpTable
NhGetInterfaceNameFromGuid
_PfRebindFilters@8
_PfUnBindInterface@4
SetIpStatistics
GetIpAddrTable
AllocateAndGetIpAddrTableFromStack
Icmp6CreateFile
_PfSetLogBuffer@28
GetUdpStatisticsEx
GetNetworkParams

mfcsubs

?AfxA2WHelper@@YGPAGPAGPBDH@Z
?ConcatInPlace@CString@@IAEXHPBG@Z
?Right@CString@@QBE?AV1@H@Z
??9@YG_NABVCString@@0@Z
?HashKey@CMapStringToPtr@@QBEIPBG@Z
?AfxGetEmptyString@@YGABVCString@@XZ
?TrimLeft@CString@@QAEXXZ
??H@YG?AVCString@@ABV0@D@Z
?Append@CStringArray@@QAEHABV1@@Z
??H@YG?AVCString@@PBGABV0@@Z
??ACStringArray@@QBE?AVCString@@H@Z
?AfxLoadString@@YGHIPAGI@Z
??BCCriticalSection@@QAEPAU_RTL_CRITICAL_SECTION@@XZ
??0CString@@QAE@ABV0@@Z
?SpanIncluding@CString@@QBE?AV1@PBG@Z
?RemoveAll@CMapStringToPtr@@QAEXXZ
??H@YG?AVCString@@GABV0@@Z
??_7CCriticalSection@@6B@

winscard

SCardGetProviderIdW
g_rgSCardT0Pci
SCardListCardsW
SCardIntroduceCardTypeA
SCardDisconnect
SCardListReadersW
SCardState
SCardAddReaderToGroupA
SCardTransmit
SCardIntroduceReaderGroupW
SCardEndTransaction
SCardSetAttrib
SCardIntroduceReaderW
g_rgSCardT1Pci
SCardControl
SCardForgetCardTypeA

crtdll

strcpy
_fpieee_flt
wcsspn
_mbctoupper
_execle
_getdrive
_CItanh
vswprintf
_mbsupr
iswupper
isleadbyte
_wcsset
_strncnt
fwrite
_mktemp
_heapwalk
strrchr
_ismbcprint
_tzname
_open
_mbsnextc

msdart

?TryReadLock@CReaderWriterLock3@@QAE_NXZ
?SetBucketLockSpinCount@CLKRHashTable@@QAEXG@Z
?WriteUnlock@CCritSec@@QAEXXZ
??1CFakeLock@@QAE@XZ
?sm_wDefaultSpinCount@CReaderWriterLock3@@1GA
?IsWinNt4orLater@CMdVersionInfo@@SAHXZ
?TryReadLock@CFakeLock@@QAE_NXZ
?IsLocked@CLockedDoubleList@@QBE_NXZ
?TryWriteLock@CReaderWriterLock@@QAE_NXZ
?IsWriteLocked@CReaderWriterLock3@@QBE_NXZ
?s_aBucketSizes@?1??BucketSizes@CLKRHashTableStats@@SGPBJXZ@4QBJB
?_Contract@CLKRLinearHashTable@@AAE?AW4LK_RETCODE@@XZ
?IsReadLocked@CCritSec@@QBE_NXZ
?ReadLock@CLKRHashTable@@QBEXXZ
?SetDefaultSpinAdjustmentFactor@CFakeLock@@SGXN@Z
?DeleteKey@CLKRLinearHashTable@@QAE?AW4LK_RETCODE@@K@Z
?IsValid@CLKRHashTable@@QBE_NXZ
?IsWriteUnlocked@CFakeLock@@QBE_NXZ
mpFree
?ConvertSharedToExclusive@CLKRHashTable@@QBEXXZ

Sections

.text
Size: 479KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 356KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff2520dd2e2b50e8ee8322c8f6dd9c64

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

iphlpapi

mfcsubs

winscard

crtdll

msdart

Sections

.text Size: 479KB - Virtual size: 479KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 356KB - Virtual size: 1.8MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 340B

.text
Size: 479KB - Virtual size: 479KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 356KB - Virtual size: 1.8MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 340B