f3a7b7160e49811846ee639ae1f19a77ecc06be8dd8cfa9a948fea58ef84505b

Sharing

Copy URL Twitter E-mail

General

Target

f3a7b7160e49811846ee639ae1f19a77ecc06be8dd8cfa9a948fea58ef84505b
Size

940KB
MD5

13bf90da5956304ca161733cd5396285
SHA1

f166fd84d79290ff58fadbeeaf8c3a2dde41eff5
SHA256

f3a7b7160e49811846ee639ae1f19a77ecc06be8dd8cfa9a948fea58ef84505b
SHA512

40fc139f7dec157207fe09dff8406714d1ace4f85983abfb94f51c262ca6cfbde409f9fea07b44d6d8480ad08089273c5e1437a497fe931ec884807153c3c4ce
SSDEEP

24576:XWeWIm19/xqQ+ICQY49n5RTsDMxZO4udxE20cPUIAKqKlqeX:KLnxqQZ9sDMw500PlD

Score

N/A

Malware Config

Signatures

Files

f3a7b7160e49811846ee639ae1f19a77ecc06be8dd8cfa9a948fea58ef84505b
.exe windows x86

6ee5c90ce75ad5827bbd89492070ca28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

NetLocalGroupAddMembers
DsEnumerateDomainTrustsW
NetUserChangePassword
I_NetServerReqChallenge
NetUserModalsGet
NetAlertRaiseEx
NetUseGetInfo
NetShareEnum
NetWkstaGetInfo
NetStatisticsGet
NetGroupGetInfo
NetLocalGroupEnum
NetGroupDel

msvcrt

rand
wcsstr
iswprint
_wfreopen
isupper
_CIcos
_ismbcalpha
_timezone
toupper
longjmp
_mbsnextc
memcmp
_mbsupr
_ismbblead
__setusermatherr

user32

BeginPaint
CheckMenuItem
SetWindowsHookA
EmptyClipboard
SetWindowRgn
SendNotifyMessageW
SendMessageW
MonitorFromWindow
SetKeyboardState
PtInRect

msacm32

acmStreamUnprepareHeader
acmFormatSuggest
acmFormatDetailsW
acmDriverOpen
acmStreamPrepareHeader
acmFormatChooseW
acmStreamConvert
acmGetVersion
acmMetrics
acmFormatTagDetailsW
acmStreamSize
acmStreamOpen
acmDriverEnum
acmStreamClose
acmDriverClose

advapi32

LogonUserW
GetKernelObjectSecurity
RegRestoreKeyW
AddAccessAllowedAce
InitializeSecurityDescriptor
RegSetKeySecurity
LookupPrivilegeValueW
RegisterEventSourceW
ElfDeregisterEventSource
EnumServicesStatusW

kernel32

GetSystemTime
OutputDebugStringW
GetPrivateProfileSectionW
GetVersion
SetupComm
AddAtomA
GetWindowsDirectoryW
CreateRemoteThread
VirtualAlloc
CreateConsoleScreenBuffer
EnumDateFormatsExW
GetProcessTimes
SetVolumeLabelA
EnumResourceLanguagesW
SystemTimeToFileTime
QueryInformationJobObject
ReplaceFileW
ExpandEnvironmentStringsW
GetCalendarInfoW

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 148KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 335KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 141KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 107KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ee5c90ce75ad5827bbd89492070ca28

Headers

File Characteristics

Imports

netapi32

msvcrt

user32

msacm32

advapi32

kernel32

Sections

.text Size: 85KB - Virtual size: 84KB

.idata Size: 148KB - Virtual size: 307KB

.edata Size: 335KB - Virtual size: 377KB

.rdata Size: 141KB - Virtual size: 325KB

.bss Size: 107KB - Virtual size: 149KB

.rsrc Size: 121KB - Virtual size: 121KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 85KB - Virtual size: 84KB

.idata
Size: 148KB - Virtual size: 307KB

.edata
Size: 335KB - Virtual size: 377KB

.rdata
Size: 141KB - Virtual size: 325KB

.bss
Size: 107KB - Virtual size: 149KB

.rsrc
Size: 121KB - Virtual size: 121KB

.reloc
Size: 1KB - Virtual size: 1KB