8fafad7782a6eef2f2fc7867696c8bd08207d19e558c6f3bc88ccfde6637ebb4

Sharing

Copy URL

Twitter E-mail

General

Target

8fafad7782a6eef2f2fc7867696c8bd08207d19e558c6f3bc88ccfde6637ebb4
Size

672KB
MD5

0ed6ae659b534d2e340e29b4c03a3900
SHA1

960baf04a869133a0c2c9904b6195728cf47f9b4
SHA256

8fafad7782a6eef2f2fc7867696c8bd08207d19e558c6f3bc88ccfde6637ebb4
SHA512

e988c9185139a9088e144c23ece27eeb54d8d613e400f1465af940b625879f9f037d0e87ee95224d4f280e0a9dc863fbc7e3ea14a16da7bc574aadfbbc5bb801
SSDEEP

12288:L58diG/MEp0XqPcbie5msHwPDTafWB5oVz8II6kwy0aLpuJjW2BN/tSFyf0VzMN:L8iG/n0Xwc9UsaDef4oVz8I0sMelN/tV

Score

N/A

Malware Config

Signatures

Files

8fafad7782a6eef2f2fc7867696c8bd08207d19e558c6f3bc88ccfde6637ebb4
.exe windows x86

374b1a600136f1f275cb02a0af5c691d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueueUserAPC
GetModuleHandleA
GetLastError
GetCurrentProcess
SetEvent
VirtualQueryEx
GetConsoleAliasExesLengthW
GetModuleHandleW
GetCommTimeouts
VirtualAlloc
ReadFileScatter
ReplaceFileA
DeleteFileA
SetHandleInformation
HeapQueryInformation
_lwrite
GetSystemTime
GetBinaryTypeW
FindFirstFileExW
GetProfileStringW
ContinueDebugEvent

advapi32

AddAuditAccessAce
CreateProcessWithLogonW
SetTokenInformation
LookupPrivilegeDisplayNameW
RevertToSelf
GetSidSubAuthority
FreeSid
GetTraceLoggerHandle
GetEventLogInformation
LogonUserW
InitializeAcl

mpr

WNetGetUniversalNameW
WNetGetResourceInformationW
WNetGetLastErrorW
WNetEnumResourceW
WNetUseConnectionW
WNetGetConnectionA
WNetGetUniversalNameA

ole32

IsAccelerator
OleSetMenuDescriptor
CoImpersonateClient
ReadFmtUserTypeStg
CoTaskMemRealloc
CoGetMarshalSizeMax
StgOpenStorageOnILockBytes

netapi32

Netbios
NetUserModalsSet
NetUseEnum
NetGroupSetInfo
NetLocalGroupDel
NetServerGetInfo
NetUserEnum
NetGetAnyDCName
NetWkstaSetInfo
NetGroupEnum
NetUseDel
NetUserGetInfo
NetUserGetLocalGroups
NetServiceEnum
NetConnectionEnum
NetSessionEnum
NetGroupGetUsers

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

FE_TEXT
Size: 196KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 140KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 200KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

374b1a600136f1f275cb02a0af5c691d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

mpr

ole32

netapi32

Sections

.text Size: 44KB - Virtual size: 43KB

FE_TEXT Size: 196KB - Virtual size: 286KB

.rdata Size: 84KB - Virtual size: 164KB

.data Size: 140KB - Virtual size: 203KB

.pdata Size: 200KB - Virtual size: 247KB

.reloc Size: 4KB - Virtual size: 426B

.text
Size: 44KB - Virtual size: 43KB

FE_TEXT
Size: 196KB - Virtual size: 286KB

.rdata
Size: 84KB - Virtual size: 164KB

.data
Size: 140KB - Virtual size: 203KB

.pdata
Size: 200KB - Virtual size: 247KB

.reloc
Size: 4KB - Virtual size: 426B