b4babcf50ef10618f172fedc798ca2c5582119fc5f28d96b07d2ecb2eea78d3d

General

Target

b4babcf50ef10618f172fedc798ca2c5582119fc5f28d96b07d2ecb2eea78d3d
Size

414KB
MD5

106ec158bad7fe57bd9f40803ad905b1
SHA1

8e0c9e8fa93226056340fe5a6b11bb71423e775b
SHA256

b4babcf50ef10618f172fedc798ca2c5582119fc5f28d96b07d2ecb2eea78d3d
SHA512

fcc2ea80d2fee3bafe801f439ae7de464ba2340036a3ab34e9bc6c611584af731de38cb98bbbca2c979135ebe5159c827b506d8dcc2e5e66107924f503269246
SSDEEP

12288:su1EVbounkPU7vdqvL+P2+qr1I3LZLZQT:sLFnMU4vL+M5CZLZQT

Score

N/A

Malware Config

Signatures

Files

b4babcf50ef10618f172fedc798ca2c5582119fc5f28d96b07d2ecb2eea78d3d
.exe windows x86

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
VirtualAlloc
CloseHandle
Sleep
GetThreadPriority
GetProfileStringW
FindAtomW
SetUnhandledExceptionFilter
ChangeTimerQueueTimer
GetAtomNameA
GetSystemDefaultUILanguage
ord1
GetVersionExW
SetCommState
ExitProcess
_lclose
CreateEventW
GetTempPathA

msrepl40

ord2001
ord2042
ord2024
ord2041

rtutils

TraceDeregisterW
RouterLogEventStringA
TraceRegisterExA
RouterLogEventExW
LogEventW
TraceDumpExA
RouterLogEventDataA
RouterLogDeregisterW
LogEventA
TracePutsExA
RouterLogEventStringW
RouterLogRegisterA
LogErrorA
TracePrintfA
TraceDeregisterExA
TracePrintfExW
RouterLogDeregisterA
RouterLogEventW
TraceRegisterExW
LogErrorW

msvbvm60

__vbaForEachCollVar
ord690
_adj_fdiv_m32
__vbaVarDup
__vbaAptOffset
ord304
__vbaChkstk
ord520
_CItan
_allmul
ord709
__vbaGosubFree
_adj_fdiv_m32i
__vbaFreeStrList
ord647
__vbaForEachCollObj
__vbaFpR8
ord102
__vbaFileOpen
ord711

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textbs
Size: 381KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msrepl40

rtutils

msvbvm60

Sections

.text Size: 12KB - Virtual size: 11KB

.CRT Size: - Virtual size: 22KB

.textbs Size: 381KB - Virtual size: 477KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 12KB - Virtual size: 11KB

.CRT
Size: - Virtual size: 22KB

.textbs
Size: 381KB - Virtual size: 477KB

.rsrc
Size: 19KB - Virtual size: 19KB