35ba3d9c642c823d06cb996f83bdde8779926b9d29b8d319d5a31992a669b92b

Sharing

Copy URL Twitter E-mail

General

Target

35ba3d9c642c823d06cb996f83bdde8779926b9d29b8d319d5a31992a669b92b
Size

672KB
MD5

d76f89d90d8e6bcbd55f895130ca356f
SHA1

e3fcac09ed33835f2000ae462a0d7ec9db1e82f8
SHA256

35ba3d9c642c823d06cb996f83bdde8779926b9d29b8d319d5a31992a669b92b
SHA512

a7e59560303e9985118c56af3ae85c806d086f003341fcc2d65ee8563f84ac0256b10edbbf1f42cc9b63312c0d754f992767e124862a326fa65004e06d4d142f
SSDEEP

12288:I58diG/MEp0XqPcbie5msHwPDTafWB5oVz8II6kwy0aLpuJjW2BN/tSFyf0VzMN:I8iG/n0Xwc9UsaDef4oVz8I0sMelN/tV

Score

N/A

Malware Config

Signatures

Files

35ba3d9c642c823d06cb996f83bdde8779926b9d29b8d319d5a31992a669b92b
.exe windows x86

374b1a600136f1f275cb02a0af5c691d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueueUserAPC
GetModuleHandleA
GetLastError
GetCurrentProcess
SetEvent
VirtualQueryEx
GetConsoleAliasExesLengthW
GetModuleHandleW
GetCommTimeouts
VirtualAlloc
ReadFileScatter
ReplaceFileA
DeleteFileA
SetHandleInformation
HeapQueryInformation
_lwrite
GetSystemTime
GetBinaryTypeW
FindFirstFileExW
GetProfileStringW
ContinueDebugEvent

advapi32

AddAuditAccessAce
CreateProcessWithLogonW
SetTokenInformation
LookupPrivilegeDisplayNameW
RevertToSelf
GetSidSubAuthority
FreeSid
GetTraceLoggerHandle
GetEventLogInformation
LogonUserW
InitializeAcl

mpr

WNetGetUniversalNameW
WNetGetResourceInformationW
WNetGetLastErrorW
WNetEnumResourceW
WNetUseConnectionW
WNetGetConnectionA
WNetGetUniversalNameA

ole32

IsAccelerator
OleSetMenuDescriptor
CoImpersonateClient
ReadFmtUserTypeStg
CoTaskMemRealloc
CoGetMarshalSizeMax
StgOpenStorageOnILockBytes

netapi32

Netbios
NetUserModalsSet
NetUseEnum
NetGroupSetInfo
NetLocalGroupDel
NetServerGetInfo
NetUserEnum
NetGetAnyDCName
NetWkstaSetInfo
NetGroupEnum
NetUseDel
NetUserGetInfo
NetUserGetLocalGroups
NetServiceEnum
NetConnectionEnum
NetSessionEnum
NetGroupGetUsers

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

FE_TEXT
Size: 196KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 140KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 200KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

374b1a600136f1f275cb02a0af5c691d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

mpr

ole32

netapi32

Sections

.text Size: 44KB - Virtual size: 43KB

FE_TEXT Size: 196KB - Virtual size: 286KB

.rdata Size: 84KB - Virtual size: 164KB

.data Size: 140KB - Virtual size: 203KB

.pdata Size: 200KB - Virtual size: 247KB

.reloc Size: 4KB - Virtual size: 426B

.text
Size: 44KB - Virtual size: 43KB

FE_TEXT
Size: 196KB - Virtual size: 286KB

.rdata
Size: 84KB - Virtual size: 164KB

.data
Size: 140KB - Virtual size: 203KB

.pdata
Size: 200KB - Virtual size: 247KB

.reloc
Size: 4KB - Virtual size: 426B