be2731881b9022863108c1d75b286d89f86338643058ae1253590fe76e644030

Sharing

Copy URL Twitter E-mail

General

Target

be2731881b9022863108c1d75b286d89f86338643058ae1253590fe76e644030
Size

146KB
MD5

e1106dfc8923fe439994616d42b82d09
SHA1

125942b6a3b68d8efa12e90fd78f081bb44308b5
SHA256

be2731881b9022863108c1d75b286d89f86338643058ae1253590fe76e644030
SHA512

04e665648a552adf0c93e12a30a783861bd3fd4407dea322e462409e9b50c032f436a3b83280c0a01d0836e880f44f929a177735c6b3fa85045be30fcb4e37f1
SSDEEP

3072:6Xj5mjWxJ+P6kUmls5o64xt9UCnsBJseJfTBjU6q0nBV:guWxcGmls574XsBfLq0n/

Score

N/A

Malware Config

Signatures

Files

be2731881b9022863108c1d75b286d89f86338643058ae1253590fe76e644030
.exe windows x86

0fac286d80d2787d1949346d801c7c24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
FatalAppExitA
GetLocaleInfoA
PeekConsoleInputW
BackupRead
GetProfileSectionW
BeginUpdateResourceA
LoadLibraryA
GetProcAddress
GetTickCount
TransactNamedPipe
EnumLanguageGroupLocalesW
GetCalendarInfoW
GlobalUnlock
Sleep

user32

GetClassNameW
GetWindowTextW
CreateDesktopW
EnumDisplayMonitors
WinHelpA
ReplyMessage
TranslateAcceleratorA
GetThreadDesktop
GetPriorityClipboardFormat
InflateRect
GetMessageW
IsCharLowerA
GetComboBoxInfo
EnumPropsA

gdi32

AbortPath
GetROP2
CreateDIBitmap
PolyBezier
GetBitmapBits
GetPaletteEntries
RestoreDC

advapi32

SetTokenInformation
ConvertStringSidToSidW
InitiateSystemShutdownA
LookupAccountSidA
LookupPrivilegeValueW
GetAclInformation
NotifyChangeEventLog
GetFileSecurityW
GetLengthSid

Exports

Exports

ZnfpAa
ZnfpAgbxf
ZnfpAh
ZnfpAr
ZnfpBjnh
ZnfpBvub
ZnfpCjxkze
ZnfpCkbblg
ZnfpDdh
ZnfpDk
ZnfpDouwfa
ZnfpEm
ZnfpEugwxz
ZnfpFd
ZnfpGdbseo
ZnfpGeiz
ZnfpGgdb
ZnfpGjhemy
ZnfpGl
ZnfpGzok
ZnfpHlpxbv
ZnfpHuyfy
ZnfpIgmvwt
ZnfpIo
ZnfpIwpem
ZnfpJsky
ZnfpJtk
ZnfpKkqhx
ZnfpKps
ZnfpKrzi
ZnfpKx
ZnfpLgp
ZnfpLp
ZnfpMdj
ZnfpMec
ZnfpMpkf
ZnfpMpxtj
ZnfpNassi
ZnfpOdpw
ZnfpOlfn
ZnfpPaw
ZnfpPfpvjt
ZnfpPiua
ZnfpPxtl
ZnfpQcas
ZnfpQhr
ZnfpQub
ZnfpQuvtzf
ZnfpRcouy
ZnfpRdibg
ZnfpSwsw
ZnfpSwzwvr
ZnfpTbhxpu
ZnfpTbii
ZnfpTr
ZnfpTvsmcb
ZnfpUaqu
ZnfpUr
ZnfpVqjiwh
ZnfpVqxj
ZnfpVs
ZnfpVxqvvf
ZnfpVyny
ZnfpWeen
ZnfpWi
ZnfpWjg
ZnfpWncf
ZnfpWrtrc
ZnfpWy
ZnfpXi
ZnfpXlgb
ZnfpXnlbxy
ZnfpXpts
ZnfpXwaqqj
ZnfpXycuf
ZnfpYwu
ZnfpZdlfpz
ZnfpZdqajc
ZnfpZgbkz
ZnfpZhkqwz
ZnfpZom
ZnfpZt
ZnfpZulpl
ZnfpZwzn
ZnfpZynvrm

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fac286d80d2787d1949346d801c7c24

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 114KB - Virtual size: 114KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 2KB - Virtual size: 429KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 114KB - Virtual size: 114KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 2KB - Virtual size: 429KB

.reloc
Size: 13KB - Virtual size: 12KB