f75e843f6e5d39cada19c56c1ac01a0feaef0c2c9199e84d7e6a8204ca54d146

Sharing

Copy URL Twitter E-mail

General

Target

f75e843f6e5d39cada19c56c1ac01a0feaef0c2c9199e84d7e6a8204ca54d146
Size

113KB
MD5

ad0ce9f6ed6d492e20881d0dff617180
SHA1

12fab6fda5175b7c2de81c371307d083aae6293e
SHA256

f75e843f6e5d39cada19c56c1ac01a0feaef0c2c9199e84d7e6a8204ca54d146
SHA512

735f03b20428ba1ea949a1765ed19818cb57cef31551de5207bdf8b5b9b6a7351a9850a92a63afb283a902f9b9a1a995b2ce803580fa0544b4f4bdea2fa89d8d
SSDEEP

1536:E+TZymx9J+IH1N2il8aFm8n3i6GSt9vi9aQVpFTdZWojgfefBQDMi4VUbOICl53R:E+TZymx9LvFFy6htcfHjEeTOCIQPJ

Score

N/A

Malware Config

Signatures

Files

f75e843f6e5d39cada19c56c1ac01a0feaef0c2c9199e84d7e6a8204ca54d146
.exe windows x86

c9e3a2b11a6e02461d06cac3a114feb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_controlfp
__p__fmode
__p__commode
?terminate@@YAXXZ
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
??2@YAPAXI@Z
free
__CxxFrameHandler
malloc
wcscpy
wcstok
_iob
wcslen
_wtoi
_ltow
_wsetlocale
_wcsicmp
wcschr
_CxxThrowException
_c_exit
_exit
_XcptFilter
_cexit
??1type_info@@UAE@XZ
_except_handler3
exit
calloc
wcstod
wcstol
wcsncmp
_wcsnicmp
realloc
fflush
fprintf
strtok
wcsstr
_wcsnset
wcscat
_strnicmp
_stricmp
localtime
??3@YAXPAX@Z

kernel32

FileTimeToSystemTime
GetComputerNameExW
GetConsoleMode
SetConsoleMode
ReadFile
ReadConsoleW
MultiByteToWideChar
LoadLibraryW
FreeLibrary
lstrcpynW
WideCharToMultiByte
VerSetConditionMask
VerifyVersionInfoW
lstrlenW
lstrcmpiW
lstrcmpW
InterlockedIncrement
GetModuleHandleA
LocalFree
GetStdHandle
WriteConsoleW
FormatMessageW
LocalAlloc
SetLastError
GetNumberFormatW
InterlockedDecrement
CreateFileW
CreateFileMappingW
CloseHandle
MapViewOfFile
GetDateFormatW
GetTimeFormatW
lstrcatW
UnmapViewOfFile
GetUserDefaultLCID
GetLocaleInfoW
GetModuleHandleW
GetProcAddress
GetLastError
lstrcpyW

user32

LoadStringW
wsprintfW
CharUpperW

mpr

WNetAddConnection2W
WNetCancelConnection2W
WNetGetLastErrorW

ole32

CoTaskMemFree
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysAllocStringByteLen
VariantClear
VariantChangeType
VariantCopy
VariantInit
SysFreeString
SysStringLen
SysAllocString

framedyn

?Compare@CHString@@QBEHPBG@Z
?Format@CHString@@QAAXPBGZZ
?GetBufferSetLength@CHString@@QAEPAGH@Z
?ReleaseBuffer@CHString@@QAEXH@Z
??YCHString@@QAEABV0@PBG@Z
?Left@CHString@@QBE?AV1@H@Z
?FindOneOf@CHString@@QBEHPBG@Z
?Mid@CHString@@QBE?AV1@H@Z
??4CHString@@QAEABV0@ABV0@@Z
?Find@CHString@@QBEHG@Z
?GetBuffer@CHString@@QAEPAGH@Z
??0CHString@@QAE@PBG@Z
??0CHString@@QAE@XZ
??1CHString@@QAE@XZ
?GetData@CHString@@IBEPAUCHStringData@@XZ
??4CHString@@QAEABV0@PBG@Z

shlwapi

StrCmpNW

secur32

GetUserNameExW

ws2_32

gethostbyaddr
WSAGetLastError
inet_addr
WSACleanup
WSAStartup

netapi32

NetServerGetInfo
NetApiBufferFree

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9e3a2b11a6e02461d06cac3a114feb5

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

mpr

ole32

oleaut32

framedyn

shlwapi

secur32

ws2_32

netapi32

Sections

.text Size: 44KB - Virtual size: 43KB

.data Size: 512B - Virtual size: 140B

.tls Size: 56KB - Virtual size: 56KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 44KB - Virtual size: 43KB

.data
Size: 512B - Virtual size: 140B

.tls
Size: 56KB - Virtual size: 56KB

.rsrc
Size: 11KB - Virtual size: 10KB