f3fb183fafa15b2c6a49e0b7896c90c630a9d724ae03c136ab7553d7612a01dc

Sharing

Copy URL Twitter E-mail

General

Target

f3fb183fafa15b2c6a49e0b7896c90c630a9d724ae03c136ab7553d7612a01dc
Size

1.2MB
MD5

037dd184cd882065efc6cb24ba074ec3
SHA1

c4b4c3117018b94b280b5364fed1ec64badc69e1
SHA256

f3fb183fafa15b2c6a49e0b7896c90c630a9d724ae03c136ab7553d7612a01dc
SHA512

1b6c7625ed080d30f0c656667b6947325a9bb5cd6e39077e14cec57531e1f40d6b0e5d69668e7d77b0bd760c388651be16a6f2e5aecb1d46bfa20ca543debe69
SSDEEP

24576:nPD4he7hGDqzJA+uBfumh9KCp8Y+g6WCdXGPjYlWl3fiugA+RXHifjs7:nPD4EtTJA+uBfuG936BZGPflPeEjY

Score

N/A

Malware Config

Signatures

Files

f3fb183fafa15b2c6a49e0b7896c90c630a9d724ae03c136ab7553d7612a01dc
.exe windows x86

c938e63e9247e84882b80ada441c27f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

GetWindowsAccountDomainSid
OpenServiceW
SetTokenInformation
RegLoadKeyW
AddAuditAccessAce
GetSidSubAuthority
CloseServiceHandle
RegFlushKey
CheckTokenMembership
RegCreateKeyExA
GetSecurityDescriptorDacl
RegisterEventSourceA
CryptAcquireContextA
AddAccessAllowedAce
LsaFreeMemory

iphlpapi

GetNetworkParams
GetIfTable
InternalSetIpNetEntry
GetIpStatistics
DeleteIpForwardEntry
GetIpAddrTable
GetUdpStatistics

netapi32

NetGroupDel
NetStatisticsGet
NetFileEnum
NetUserDel
NetAlertRaiseEx
NetRemoteTOD
NetSessionEnum
NetJoinDomain
NetpIsRemote
NetLocalGroupAddMembers
NetWkstaUserGetInfo
NetLocalGroupSetInfo
NetLocalGroupSetMembers
NetShareDel
NetShareEnum
NetGroupSetInfo
NetapipBufferAllocate

kernel32

SetProcessWorkingSetSize
QueryInformationJobObject
SetFileAttributesA
CloseProfileUserMapping
HeapValidate
Module32Next
LoadLibraryA
SetCurrentDirectoryA
WriteProfileSectionA
WaitForSingleObjectEx
VirtualAlloc
ClearCommBreak
GetThreadContext

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vUYKFL
Size: 247KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WIUxT
Size: 239KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Zxkgxf
Size: 266KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hN
Size: 57KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c938e63e9247e84882b80ada441c27f1

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

iphlpapi

netapi32

kernel32

Sections

.text Size: 247KB - Virtual size: 247KB

.vUYKFL Size: 247KB - Virtual size: 425KB

.WIUxT Size: 239KB - Virtual size: 409KB

.Zxkgxf Size: 266KB - Virtual size: 355KB

.hN Size: 57KB - Virtual size: 72KB

.rsrc Size: 141KB - Virtual size: 140KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 247KB - Virtual size: 247KB

.vUYKFL
Size: 247KB - Virtual size: 425KB

.WIUxT
Size: 239KB - Virtual size: 409KB

.Zxkgxf
Size: 266KB - Virtual size: 355KB

.hN
Size: 57KB - Virtual size: 72KB

.rsrc
Size: 141KB - Virtual size: 140KB

.reloc
Size: 1KB - Virtual size: 1KB