a01cc138e9cc5da07648adef35a2d654102be5eef4f467c6f62a20b68bc42d41

General

Target

a01cc138e9cc5da07648adef35a2d654102be5eef4f467c6f62a20b68bc42d41
Size

422KB
MD5

3f3a3d8270cde8c3e53e789a985395b3
SHA1

2c5ba0e25af6b9b07d0d28115c613a3e19c2f909
SHA256

a01cc138e9cc5da07648adef35a2d654102be5eef4f467c6f62a20b68bc42d41
SHA512

7de918d20ed526da7e92dabb5207d7a8aa52861939210f19538a0a8a01e53f03e9134a04ec35fb3d8540e55539a645395e836cce554f6790312be720b8402052
SSDEEP

6144:DYwJH/cOvRbtBn49XyJZcb0prYwUNY5/Zu/Qb6ouD8Ufb2REUPc93FHo9hzYhNva:DV9/c0S9XecIpDvu/hSyRsc9y9hwv45

Score

N/A

Malware Config

Signatures

Files

a01cc138e9cc5da07648adef35a2d654102be5eef4f467c6f62a20b68bc42d41
.exe windows x86

c398ebe5b65057682091e7010ab9b897

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
IsIconic
SetSysColors
BeginDeferWindowPos
DeferWindowPos
WindowFromPoint
SetWindowPos
DestroyWindow
ShowWindowAsync
IsZoomed
EnumThreadWindows
GetForegroundWindow
BringWindowToTop
AdjustWindowRectEx

kernel32

GetStartupInfoA
VirtualAllocEx
GetCurrentThreadId
GetComputerNameA
GetTickCount
GetProcAddress
GetModuleHandleA
SetEvent
HeapUnlock
IsBadReadPtr
GlobalFree
GetUserDefaultLCID
LCMapStringA
GlobalAlloc
GetUserDefaultLangID
ReleaseSemaphore
GetLocaleInfoA
LocalFlags

netapi32

NetUserSetGroups
NetGetAnyDCName
NetErrorLogWrite
NetAuditClear
NetErrorLogRead
NetFileGetInfo
Netbios
NetAuditRead
NetConfigGet
NetGetDCName
NetConfigSet
NetFileEnum
NetConfigGetAll

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
fwrite
fread
fputs
_fsopen
fsetpos
free
_XcptFilter
_fullpath
freopen
fputc
fprintf
fopen
ftell

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 385KB - Virtual size: 579KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c398ebe5b65057682091e7010ab9b897

Headers

File Characteristics

Imports

user32

kernel32

netapi32

msvcrt

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 512B - Virtual size: 308B

.data Size: 385KB - Virtual size: 579KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 512B - Virtual size: 308B

.data
Size: 385KB - Virtual size: 579KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 3KB