ad297a4f0d5dc3efed6eaf4923b399ddae14360451b585a9c286456f7cb2e4ba

General

Target

ad297a4f0d5dc3efed6eaf4923b399ddae14360451b585a9c286456f7cb2e4ba
Size

915KB
MD5

7845ff1c419846943ed3d252be4f4130
SHA1

84f62e23814afa11ed9f1b92d7cc818cb6f46430
SHA256

ad297a4f0d5dc3efed6eaf4923b399ddae14360451b585a9c286456f7cb2e4ba
SHA512

3137973c70c9f4d6f08ad233f25be006c061366be7e752f5892dfa39be8edd1e26899148e6ece9c6b70aa10f9eb2ac6405562fa908fc830bab39cc48296e1382
SSDEEP

24576:tS+vpRceasjG1npva7I37UzkcD13aPstvVB5:tBvpRP9Q7UzkIVXvB

Score

N/A

Malware Config

Signatures

Files

ad297a4f0d5dc3efed6eaf4923b399ddae14360451b585a9c286456f7cb2e4ba
.exe windows x86

2da5050bb90f42d29a3fd129650ab036

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

NetShareCheck
NetApiBufferFree
NetGetAnyDCName
NetUserSetInfo
NetConnectionEnum
NetSessionDel
NetGroupGetInfo
NetUserModalsSet
NetLocalGroupSetInfo
NetMessageBufferSend

wintrust

WintrustLoadFunctionPointers
CryptCATGetMemberInfo
CryptCATCatalogInfoFromContext
CryptCATAdminAcquireContext
CryptCATClose
WinVerifyTrust
CryptCATAdminAddCatalog
CryptCATEnumerateCatAttr

kernel32

VirtualAlloc
HeapLock
FileTimeToSystemTime
CreateFileMappingW
GetUserDefaultUILanguage
MulDiv
GetVolumeNameForVolumeMountPointW
InitializeCriticalSectionAndSpinCount
GetVolumeInformationW
SwitchToThread
GetCurrentProcessId
CommConfigDialogA
GetConsoleScreenBufferInfo
GetSystemDefaultLangID
_hread
LockFile
GetDiskFreeSpaceExA
OutputDebugStringA
LoadLibraryExA
VirtualFree

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.KxOv
Size: 369KB - Virtual size: 566KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zKW
Size: 327KB - Virtual size: 509KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2da5050bb90f42d29a3fd129650ab036

Headers

DLL Characteristics

File Characteristics

Imports

netapi32

wintrust

kernel32

Sections

.text Size: 79KB - Virtual size: 79KB

.KxOv Size: 369KB - Virtual size: 566KB

.zKW Size: 327KB - Virtual size: 509KB

.rsrc Size: 137KB - Virtual size: 137KB

.reloc Size: 512B - Virtual size: 38B

.text
Size: 79KB - Virtual size: 79KB

.KxOv
Size: 369KB - Virtual size: 566KB

.zKW
Size: 327KB - Virtual size: 509KB

.rsrc
Size: 137KB - Virtual size: 137KB

.reloc
Size: 512B - Virtual size: 38B