f19969911b3e79601aa34c157ab36da3783586e7fae856bda2cdb5d4d5ccdcd9

Sharing

Copy URL Twitter E-mail

General

Target

f19969911b3e79601aa34c157ab36da3783586e7fae856bda2cdb5d4d5ccdcd9
Size

184KB
MD5

70e3c98f67c76cf86cb894072318bfd9
SHA1

b9c27a2ec8103dea4150e63c0b1c3cca97d23ffd
SHA256

f19969911b3e79601aa34c157ab36da3783586e7fae856bda2cdb5d4d5ccdcd9
SHA512

c2c9c9a30216efee3d32c1238f5579e839bd69e7d39df85d4d1fd3733508b5443e45620e963fc12f2475e229cadfdb1dc6de812433d6a7eaf28f235b59597032
SSDEEP

3072:1IT5rEIDOx0Pdtyp+SxcJPWlp2sCLtGnUNlZ0ikHvTrnclNbjhge:10rEg10p+SxcJ+nJCMnumJrIm

Score

N/A

Malware Config

Signatures

Files

f19969911b3e79601aa34c157ab36da3783586e7fae856bda2cdb5d4d5ccdcd9
.exe windows x86

7780434ac22114b12c208b9e8715a54c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

oranmi

snmiconf_GetFailSafeInfo
nmiafmh_FreeMemoryHandle
nmiscsd_shutdownAgent
nmicicon_InvalidateConnection
nmimggcx_getGlobalCtx
nmimic_initializeContexts
nmicdei_DeinitializeCache
nmicrcon_ReleaseConnection
snmifmal
nmiscst_statusAgent
snmiconf_SetPrimaryNodename
snmighn_GetHostName
snmiconf_SetPrimaryNetAddr
nmipini
nmicgc2_GetConnection2
nmincmsg_CloseMsg
nmingmsg_GetMsg
nminsgm_StandaloneGetMessage
nmicini_InitializeCache
nmicearv_extractAgentRpcVersion
nminomsg_OpenMsg
snmiconf_GetDefaultAddress
nmicfovp_fmtOMSVersionPacket
snmiles_LogErrorWithString
snmifmc
nmigsd_StringDup

oranl9

snlfohd
nlfncons
nlpagsp
nldtr1
snlfacc
snlfchd
nldsfprintf
nlepeget
nlerrec
nlpains
nlerpestk

oranls9

lxzinit

oracore9

lstclo
lpmterm
lstlo
ss_mem_fre
slzgetevar
slzsetevar
sscoreserverflag

kernel32

GetLastError
WaitForSingleObject
TerminateProcess
WriteFile
FormatMessageA
LocalFree
OutputDebugStringA
CreateFileA
SetFilePointer
FreeConsole
GetModuleFileNameA
CreateProcessA
AllocConsole
GetExitCodeProcess
Sleep
GenerateConsoleCtrlEvent
CloseHandle

advapi32

SetServiceStatus
RegisterEventSourceA
RegisterServiceCtrlHandlerA
DeregisterEventSource
StartServiceCtrlDispatcherA

msvcrt

__dllonexit
_except_handler3
__set_app_type
__p__fmode
_XcptFilter
_iob
free
sprintf
_putenv
strrchr
vsprintf
strncmp
printf
_exit
__p__commode
_adjust_fdiv
fprintf
exit
__setusermatherr
__getmainargs
_initterm
__p___initenv
_onexit
_controlfp

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7780434ac22114b12c208b9e8715a54c

Headers

File Characteristics

Imports

oranmi

oranl9

oranls9

oracore9

kernel32

advapi32

msvcrt

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 170KB - Virtual size: 170KB

.rsrc Size: 1024B - Virtual size: 792B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 170KB - Virtual size: 170KB

.rsrc
Size: 1024B - Virtual size: 792B