f1f1b3e9b0054ff458cef5e45133e9a62779a96b9b9800432cf4ce3d3906aafd

Sharing

Copy URL Twitter E-mail

General

Target

f1f1b3e9b0054ff458cef5e45133e9a62779a96b9b9800432cf4ce3d3906aafd
Size

54KB
MD5

777a72871687e4c65b5f1f1cb954511d
SHA1

4023178499198c2124b81008ed4adebdab97d925
SHA256

f1f1b3e9b0054ff458cef5e45133e9a62779a96b9b9800432cf4ce3d3906aafd
SHA512

68b33c51707e2e130380b924a64273445fdb78d91dfd038cdbe832d57e9e3ddffa5bdefb7fad73e0068487e4f2a2e2c8f4ff0086b01674707c381ea34d88806b
SSDEEP

768:i99Y7uskb9io5Qb+all+a8gnLPgPleI5SWzIdna6Jp4Xn7cthvEqojVlChD1WtM3:fucOslnnj0oI5SgabJKLuEeN193

Score

N/A

Malware Config

Signatures

Files

f1f1b3e9b0054ff458cef5e45133e9a62779a96b9b9800432cf4ce3d3906aafd
.exe windows x86

05426cbb816670777601f030a683d046

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetGetUserA
WNetDirectoryNotifyA
WNetSetConnectionA
WNetGetPropertyTextW
WNetGetLastErrorA
I_MprSaveConn
WNetFormatNetworkNameA
WNetGetUserW
WNetConnectionDialog
WNetGetNetworkInformationA
WNetAddConnection3W
WNetSetConnectionW
WNetSetLastErrorW
WNetCancelConnectionW
WNetCloseEnum
WNetAddConnectionA
WNetUseConnectionW
WNetAddConnectionW
WNetSetLastErrorA
WNetConnectionDialog1W
WNetUseConnectionA
MultinetGetConnectionPerformanceW
WNetGetDirectoryTypeA
WNetDisconnectDialog1A
WNetSupportGlobalEnum
WNetGetUniversalNameW

kernel32

FindAtomW
LocalReAlloc
CreateProcessInternalA
GlobalUnlock
GetCurrentThread
WriteFileGather
MapViewOfFile
BaseInitAppcompatCacheSupport
GetEnvironmentVariableA
FindFirstVolumeMountPointA
InitializeCriticalSection
GetConsoleTitleA
RestoreLastError
LoadLibraryA
GetThreadTimes
CreateDirectoryExA
LocalAlloc
CreateTimerQueue
SetLocalTime
GetNumaAvailableMemoryNode
LoadLibraryExW
SetProcessAffinityMask
GetVolumePathNamesForVolumeNameW
SetErrorMode
SetLastConsoleEventActive
GetMailslotInfo
SetTapeParameters
SetUnhandledExceptionFilter
GlobalFlags
VirtualAlloc
GetStartupInfoA
SetStdHandle
HeapCreate
FoldStringW
GetPrivateProfileIntA
IsBadReadPtr
SetConsoleTitleW

mscat32

CryptCATGetAttrInfo
CryptCATAdminAcquireContext
CryptCATCDFEnumMembersByCDFTag
CryptCATCDFEnumCatAttributes
CryptCATCDFEnumMembersByCDFTagEx
CryptCATAdminEnumCatalogFromHash
CryptCATPutCatAttrInfo
CryptCATPersistStore
CryptCATAdminCalcHashFromFileHandle
CryptCATCDFEnumAttributesWithCDFTag
CryptCATEnumerateAttr
CatalogCompactHashDatabase
IsCatalogFile
CryptCATCDFOpen
CryptCATGetMemberInfo
CryptCATVerifyMember
MsCatFreeHashTag
CryptCATEnumerateCatAttr
CryptCATCDFClose
CryptCATClose
CryptCATAdminAddCatalog
CryptCATPutAttrInfo
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseContext
CryptCATOpen
CryptCATCDFEnumAttributes
MsCatConstructHashTag

gdi32

EngLockSurface
GetPolyFillMode
GetFontAssocStatus
GdiCleanCacheDC
SetViewportExtEx
WidenPath
GdiConvertBrush
GetLogColorSpaceW
GdiAlphaBlend
OffsetRgn
DdEntry22
GetOutlineTextMetricsW
GetRegionData
GetBitmapDimensionEx
DdEntry15
EnableEUDC
GdiEntry8
CreateDiscardableBitmap
ExtEscape
DdEntry48
gdiPlaySpoolStream
GetBrushOrgEx
GetObjectW
PATHOBJ_vEnumStart
EngQueryEMFInfo
GdiSetServerAttr
DdEntry13
DeleteMetaFile
HT_Get8BPPFormatPalette
DdEntry14
PathToRegion
CreateSolidBrush
bInitSystemAndFontsDirectoriesW

pdh

PdhBrowseCountersHW
PdhBindInputDataSourceA
PdhEnumMachinesA
PdhGetFormattedCounterArrayA
PdhGetRawCounterArrayA
PdhVbIsGoodStatus
PdhCalculateCounterFromRawValue
PdhGetCounterInfoW
PdhBindInputDataSourceW
PdhTranslateLocaleCounterW
PdhOpenQueryA
PdhSetDefaultRealTimeDataSource
PdhVbGetDoubleCounterValue
PdhAdd009CounterA
PdhEnumLogSetNamesA
PdhLookupPerfIndexByNameW
PdhBrowseCountersW
PdhGetDefaultPerfObjectHA
PdhEnumObjectItemsHW
PdhParseCounterPathW
PdhParseInstanceNameW
PdhEnumObjectItemsA
PdhGetLogFileTypeA
PdhRelogA
PdhVbGetCounterPathElements
PdhEnumObjectsHW
PdhRelogW

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

05426cbb816670777601f030a683d046

Headers

DLL Characteristics

File Characteristics

Imports

mpr

kernel32

mscat32

gdi32

pdh

Sections

.text Size: 42KB - Virtual size: 41KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 296B

.rsrc Size: 3KB - Virtual size: 31KB

.text
Size: 42KB - Virtual size: 41KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 296B

.rsrc
Size: 3KB - Virtual size: 31KB