11c5c8724cdb0bffc7537c4623f0e1d0b7347821355ad36a64586670d9226c2d

Sharing

Copy URL

Twitter E-mail

General

Target

11c5c8724cdb0bffc7537c4623f0e1d0b7347821355ad36a64586670d9226c2d
Size

851KB
MD5

2f44c1cfe270d7c2c10d913118195270
SHA1

bd7635148065290fed5c9f29197c9eda83e987dc
SHA256

11c5c8724cdb0bffc7537c4623f0e1d0b7347821355ad36a64586670d9226c2d
SHA512

f3623d691622c68d921a83039061de38bb4e0589742412ee077a87c38d9c2a4660d90d4c331c7ccec2205c2373643d431d18ebb68af72eeb9afcde11f66931b8
SSDEEP

12288:N3eszd1Hnj78RQcvFLRvb9LcHeXq89NG+mGjP/4Elgzlg6o8wcuaWXNoCwDsVk8Z:/1X8dTcHeXf9YfG7g/Am2LWHdEJUw

Score

N/A

Malware Config

Signatures

Files

11c5c8724cdb0bffc7537c4623f0e1d0b7347821355ad36a64586670d9226c2d
.exe windows x86

f2c701f563bad994d6a5df23be6f4edf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

NetUserModalsSet
NetGetDCName
NetShareAdd
NetRenameMachineInDomain
NetServiceEnum
NetUserChangePassword
NetGroupSetInfo
NetUseAdd
NetGetJoinInformation
I_NetServerAuthenticate
NetLocalGroupDelMember
NetGetAnyDCName
NetLocalGroupEnum
NetSessionDel
DsGetSiteNameW
NetServerDiskEnum

advapi32

RegDeleteKeyW
RegCreateKeyExW
CreateServiceA
RegisterTraceGuidsW
RegSetValueExW
RegSetKeySecurity
RegQueryMultipleValuesA
GetSidSubAuthorityCount
RegSetValueW
CryptGenRandom
AreAnyAccessesGranted
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetTokenInformation

comctl32

ImageList_GetBkColor
CreatePropertySheetPageA
ImageList_DrawIndirect
ImageList_DragEnter
CreatePropertySheetPageW
ImageList_Write
PropertySheetW
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_Create
ImageList_DrawEx

msvcrt

_mbsnicmp
_ecvt
??0exception@@QAE@ABV0@@Z
_dup2
_wrename
__lc_collate_cp
iswupper
_ftime
_findnext
_wfullpath
_chsize
isprint
abs
mktime

kernel32

GetLocaleInfoA
SetThreadPriorityBoost
SetConsoleKeyShortcuts
CreateFileA
FlushViewOfFile
VirtualAlloc
GetVersion
LeaveCriticalSection
OpenEventW
FindFirstFileExW
Module32FirstW
SetVolumeLabelA

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dOmv
Size: 204KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UjY
Size: 433KB - Virtual size: 666KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2c701f563bad994d6a5df23be6f4edf

Headers

File Characteristics

Imports

netapi32

advapi32

comctl32

msvcrt

kernel32

Sections

.text Size: 76KB - Virtual size: 76KB

.dOmv Size: 204KB - Virtual size: 347KB

.UjY Size: 433KB - Virtual size: 666KB

.rsrc Size: 135KB - Virtual size: 135KB

.reloc Size: 1024B - Virtual size: 720B

.text
Size: 76KB - Virtual size: 76KB

.dOmv
Size: 204KB - Virtual size: 347KB

.UjY
Size: 433KB - Virtual size: 666KB

.rsrc
Size: 135KB - Virtual size: 135KB

.reloc
Size: 1024B - Virtual size: 720B