3f2092399b476576227d5105f7197e2f34f0af9356189a739b1942f4b9f03823

General

Target

3f2092399b476576227d5105f7197e2f34f0af9356189a739b1942f4b9f03823
Size

414KB
MD5

f4b26391b1aae8a7ee2a7cf17c773ba5
SHA1

8a228de8dce2a8f510f9abc220022a47893da6e9
SHA256

3f2092399b476576227d5105f7197e2f34f0af9356189a739b1942f4b9f03823
SHA512

0f564a5b49762918715b5540cfb965a1efb65780ad61dc8ced8d313471a310e447eb31f7bdac245d1eb421687472a94101e78f46cd7fe9fc81fa3e708c9bbb1f
SSDEEP

12288:sC1EVbounkPU7vdqvL+P2+qr1I3LZLZQT:svFnMU4vL+M5CZLZQT

Score

N/A

Malware Config

Signatures

Files

3f2092399b476576227d5105f7197e2f34f0af9356189a739b1942f4b9f03823
.exe windows x86

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
VirtualAlloc
CloseHandle
Sleep
GetThreadPriority
GetProfileStringW
FindAtomW
SetUnhandledExceptionFilter
ChangeTimerQueueTimer
GetAtomNameA
GetSystemDefaultUILanguage
ord1
GetVersionExW
SetCommState
ExitProcess
_lclose
CreateEventW
GetTempPathA

msrepl40

ord2001
ord2042
ord2024
ord2041

rtutils

TraceDeregisterW
RouterLogEventStringA
TraceRegisterExA
RouterLogEventExW
LogEventW
TraceDumpExA
RouterLogEventDataA
RouterLogDeregisterW
LogEventA
TracePutsExA
RouterLogEventStringW
RouterLogRegisterA
LogErrorA
TracePrintfA
TraceDeregisterExA
TracePrintfExW
RouterLogDeregisterA
RouterLogEventW
TraceRegisterExW
LogErrorW

msvbvm60

__vbaForEachCollVar
ord690
_adj_fdiv_m32
__vbaVarDup
__vbaAptOffset
ord304
__vbaChkstk
ord520
_CItan
_allmul
ord709
__vbaGosubFree
_adj_fdiv_m32i
__vbaFreeStrList
ord647
__vbaForEachCollObj
__vbaFpR8
ord102
__vbaFileOpen
ord711

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textbs
Size: 381KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msrepl40

rtutils

msvbvm60

Sections

.text Size: 12KB - Virtual size: 11KB

.CRT Size: - Virtual size: 22KB

.textbs Size: 381KB - Virtual size: 477KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 12KB - Virtual size: 11KB

.CRT
Size: - Virtual size: 22KB

.textbs
Size: 381KB - Virtual size: 477KB

.rsrc
Size: 19KB - Virtual size: 19KB