ba57a88fdee7dc88f0747e569559a9e86a29aa98b31fecfdb5ed52dceb78c100

General

Target

ba57a88fdee7dc88f0747e569559a9e86a29aa98b31fecfdb5ed52dceb78c100
Size

998KB
MD5

3d07a1e017d3b18c68f34d2422897c3e
SHA1

9ce5fd1d8b7f0da1332fd6547d22f32562e1a0b9
SHA256

ba57a88fdee7dc88f0747e569559a9e86a29aa98b31fecfdb5ed52dceb78c100
SHA512

989f1acc63a79ed331e77e3164914ef992ef8337a696ab9a8d8081faa08b9cba816bae7666bd36c966a898c19a04c45d24b5a1bae72a00136b2097783a74fade
SSDEEP

24576:Usz2uOWUuJmLY5DnJOnS7BT0n+DZ4JPoa5hX:Uu2lWXOYZnT1T0+DGNzX

Score

N/A

Malware Config

Signatures

Files

ba57a88fdee7dc88f0747e569559a9e86a29aa98b31fecfdb5ed52dceb78c100
.exe windows x86

92a4871a01635e9085f3c3caf307adac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNamesForVolumeNameA
CreateThread
GetTimeZoneInformation
CreateProcessInternalW
VirtualAlloc
LockFile
ConnectNamedPipe
GetThreadLocale
LoadLibraryA
ReadConsoleInputA
PeekConsoleInputW
SetLocalPrimaryComputerNameA
SetNamedPipeHandleState
LZClose
EnumerateLocalComputerNamesA
LocalAlloc
FindResourceA
RtlCaptureStackBackTrace
GetModuleHandleA
GetPrivateProfileIntA

esent

JetMakeKey
JetResetSessionContext
JetOpenTable
JetGetRecordPosition
JetEnumerateColumns
JetGetTableColumnInfo
JetDefragment2
JetRetrieveTaggedColumnList
JetSetTableSequential
JetEndSession@8
JetGetInstanceInfo
JetGetLogInfoInstance
JetGetLS
JetSnapshotStop
JetUpdate
JetCreateDatabase
JetStopService
JetDetachDatabase
JetRenameTable
JetGetDatabaseInfo
JetCommitTransaction
JetRestoreInstance
JetEndExternalBackupInstance2

rasmxs

DeviceSetInfo
DeviceConnect
DeviceListen
DeviceDone
DeviceWork
DeviceGetInfo
DeviceEnum

Sections

.text
Size: 452KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 294KB - Virtual size: 926KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92a4871a01635e9085f3c3caf307adac

Headers

File Characteristics

Imports

kernel32

esent

rasmxs

Sections

.text Size: 452KB - Virtual size: 452KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 294KB - Virtual size: 926KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 452KB - Virtual size: 452KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 294KB - Virtual size: 926KB

.rsrc
Size: 6KB - Virtual size: 6KB