93dbf1fe71a695ce3ca8c3ee0663a36ee12c0dde45b25aa9cd7c394185b24547

Sharing

Copy URL Twitter E-mail

General

Target

93dbf1fe71a695ce3ca8c3ee0663a36ee12c0dde45b25aa9cd7c394185b24547
Size

263KB
MD5

bea222de4296dc3afdaa5ebebd23ac7f
SHA1

0c99fd2ebdb9185f1f6bc8e5b0a35c7b1e65b640
SHA256

93dbf1fe71a695ce3ca8c3ee0663a36ee12c0dde45b25aa9cd7c394185b24547
SHA512

e39533b1c322b8d6ff1ff2c494a23a855c8835293a7602a83ad68535f23b04b37c94310cf72bf0dfb7f599c99d616a8f90a71c2313228ad732c83e41bbd5df7f
SSDEEP

6144:AUU8w6wvTgxHDrbo33qh+YVstEL5UX9i6fYhFG/I:68QTX33qh1Vb89ig+FD

Score

N/A

Malware Config

Signatures

Files

93dbf1fe71a695ce3ca8c3ee0663a36ee12c0dde45b25aa9cd7c394185b24547
.exe windows x86

7fb2c7efe5b5ca95d73455ebd2101814

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wtoi
wcslen
wcscat
_wcsnicmp
wcsstr
free
_initterm
malloc
_adjust_fdiv

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetProcessHeap
HeapFree
DeleteCriticalSection
CloseHandle
ExpandEnvironmentStringsW
WaitForSingleObject
GetSystemTimeAsFileTime
lstrlenW
GetProcAddress
LoadLibraryW
SwitchToThread
InterlockedExchange
QueueUserAPC
DisableThreadLibraryCalls
GetLastError
LoadLibraryExW
FreeLibrary
CompareStringW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetTickCount

netsh.exe

MatchTagsInCmdLine
MatchEnumTag
PrintMessageFromModule
RegisterContext
RegisterHelper

ole32

CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoSetProxyBlanket
CoTaskMemAlloc
StringFromGUID2
CoUninitialize

oleaut32

VariantInit
SysAllocString
VariantClear
SysFreeString

rpcrt4

RpcStringFreeW
RpcStringBindingComposeW
NdrClientCall2
RpcBindingFromStringBindingW
RpcBindingSetAuthInfoExW
RpcBindingFree

rtutils

TraceRegisterExA
TraceDeregisterW
TraceVprintfExA

user32

LoadStringW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p102
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0x9a9
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kalqo
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.88111
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.9102
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1827
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.7382
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.81721
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajdiw
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.09a
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.09a5
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.09a6
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.11524
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.9a9s
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a4a4
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fb2c7efe5b5ca95d73455ebd2101814

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

netsh.exe

ole32

oleaut32

rpcrt4

rtutils

user32

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 2KB

.p102 Size: 512B - Virtual size: 186B

.0x9a9 Size: 512B - Virtual size: 186B

.kalqo Size: 512B - Virtual size: 186B

.88111 Size: 512B - Virtual size: 186B

.9102 Size: 512B - Virtual size: 392B

.1827 Size: 512B - Virtual size: 186B

.7382 Size: 512B - Virtual size: 186B

.81721 Size: 201KB - Virtual size: 200KB

.ajdiw Size: 512B - Virtual size: 194B

.09a Size: 512B - Virtual size: 208B

.09a5 Size: 512B - Virtual size: 216B

.09a6 Size: 512B - Virtual size: 186B

.11524 Size: 512B - Virtual size: 158B

.9a9s Size: 201KB - Virtual size: 200KB

.a4a4 Size: 512B - Virtual size: 158B

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 276B

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 2KB

.p102
Size: 512B - Virtual size: 186B

.0x9a9
Size: 512B - Virtual size: 186B

.kalqo
Size: 512B - Virtual size: 186B

.88111
Size: 512B - Virtual size: 186B

.9102
Size: 512B - Virtual size: 392B

.1827
Size: 512B - Virtual size: 186B

.7382
Size: 512B - Virtual size: 186B

.81721
Size: 201KB - Virtual size: 200KB

.ajdiw
Size: 512B - Virtual size: 194B

.09a
Size: 512B - Virtual size: 208B

.09a5
Size: 512B - Virtual size: 216B

.09a6
Size: 512B - Virtual size: 186B

.11524
Size: 512B - Virtual size: 158B

.9a9s
Size: 201KB - Virtual size: 200KB

.a4a4
Size: 512B - Virtual size: 158B

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 276B