513850cadbeb5f24779ed5f7f578fe8d4da93859330c927e4f3c9be952b30597

Sharing

Copy URL Twitter E-mail

General

Target

513850cadbeb5f24779ed5f7f578fe8d4da93859330c927e4f3c9be952b30597
Size

1.2MB
MD5

194bac111500d44c1b76b44a7260b48d
SHA1

0f5818a996e5bff184f209d6d5601b6db7f4c449
SHA256

513850cadbeb5f24779ed5f7f578fe8d4da93859330c927e4f3c9be952b30597
SHA512

9eb32b96ddbc7920cc33ff5338771e243b110d707eb04545b76a9156167a32fd14ec2fd7ed9de92d8103922ab93aed3aaecf91c720268d4c5f236f7e7adb7d1b
SSDEEP

24576:dPD4he7hGDqzJA+uBfumh9KCp8Y+g6WCdXGPjYlWl3fiugA+RXHifjs7:dPD4EtTJA+uBfuG936BZGPflPeEjY

Score

N/A

Malware Config

Signatures

Files

513850cadbeb5f24779ed5f7f578fe8d4da93859330c927e4f3c9be952b30597
.exe windows x86

c938e63e9247e84882b80ada441c27f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

GetWindowsAccountDomainSid
OpenServiceW
SetTokenInformation
RegLoadKeyW
AddAuditAccessAce
GetSidSubAuthority
CloseServiceHandle
RegFlushKey
CheckTokenMembership
RegCreateKeyExA
GetSecurityDescriptorDacl
RegisterEventSourceA
CryptAcquireContextA
AddAccessAllowedAce
LsaFreeMemory

iphlpapi

GetNetworkParams
GetIfTable
InternalSetIpNetEntry
GetIpStatistics
DeleteIpForwardEntry
GetIpAddrTable
GetUdpStatistics

netapi32

NetGroupDel
NetStatisticsGet
NetFileEnum
NetUserDel
NetAlertRaiseEx
NetRemoteTOD
NetSessionEnum
NetJoinDomain
NetpIsRemote
NetLocalGroupAddMembers
NetWkstaUserGetInfo
NetLocalGroupSetInfo
NetLocalGroupSetMembers
NetShareDel
NetShareEnum
NetGroupSetInfo
NetapipBufferAllocate

kernel32

SetProcessWorkingSetSize
QueryInformationJobObject
SetFileAttributesA
CloseProfileUserMapping
HeapValidate
Module32Next
LoadLibraryA
SetCurrentDirectoryA
WriteProfileSectionA
WaitForSingleObjectEx
VirtualAlloc
ClearCommBreak
GetThreadContext

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vUYKFL
Size: 247KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WIUxT
Size: 239KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Zxkgxf
Size: 266KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hN
Size: 57KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c938e63e9247e84882b80ada441c27f1

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

iphlpapi

netapi32

kernel32

Sections

.text Size: 247KB - Virtual size: 247KB

.vUYKFL Size: 247KB - Virtual size: 425KB

.WIUxT Size: 239KB - Virtual size: 409KB

.Zxkgxf Size: 266KB - Virtual size: 355KB

.hN Size: 57KB - Virtual size: 72KB

.rsrc Size: 141KB - Virtual size: 140KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 247KB - Virtual size: 247KB

.vUYKFL
Size: 247KB - Virtual size: 425KB

.WIUxT
Size: 239KB - Virtual size: 409KB

.Zxkgxf
Size: 266KB - Virtual size: 355KB

.hN
Size: 57KB - Virtual size: 72KB

.rsrc
Size: 141KB - Virtual size: 140KB

.reloc
Size: 1KB - Virtual size: 1KB