7a8fe2221d2b9bd86405b7bb315e5560aed60ed41d3c9721d3f03b4928868df9

Sharing

Copy URL Twitter E-mail

General

Target

7a8fe2221d2b9bd86405b7bb315e5560aed60ed41d3c9721d3f03b4928868df9
Size

936KB
MD5

58221a91eac88c156e8368292c8cb315
SHA1

f5156bf15f9a243bb58818b99e3f0b6fdf5798a8
SHA256

7a8fe2221d2b9bd86405b7bb315e5560aed60ed41d3c9721d3f03b4928868df9
SHA512

1b014ea4441d1cdfc77de58d99ff71d119f3c8079cdfe3a51274ff7fe79616013075750109c24bedb76df34ec95b72b3e8f84e0ba3215a96cc11c70a8e45e06e
SSDEEP

12288:cXdOdDw+HlUGrcHx925hQVMbk2jgLI80TnzzEe+lZFl80eLtNycYt:cK/Hlf4EhQVMXjgLG/zEe+lZFS0epZY

Score

N/A

Malware Config

Signatures

Files

7a8fe2221d2b9bd86405b7bb315e5560aed60ed41d3c9721d3f03b4928868df9
.exe windows x86

d10689d514eda0f306ba8bc8afbaa3b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

mciDriverNotify
PlaySoundW
mixerGetLineControlsA
waveInOpen
timeGetTime
waveInGetPosition
waveOutUnprepareHeader
midiOutGetNumDevs
midiStreamClose
mixerGetLineControlsW
waveInGetID

netapi32

NetUserGetLocalGroups
NetServerGetInfo
NetFileEnum
NetGetDCName
NetApiBufferAllocate
NetQueryDisplayInformation
NetWkstaUserGetInfo
I_NetServerAuthenticate
NetShareAdd
NetUseAdd
NetUnjoinDomain
NetLocalGroupDel
NetGroupDelUser
NetGroupAddUser

advapi32

AreAnyAccessesGranted
IsWellKnownSid
GetCurrentHwProfileA
GetNumberOfEventLogRecords
RegSetKeySecurity
GetSecurityInfo
AddAccessAllowedAce
CloseTrace
GetKernelObjectSecurity
EnumServicesStatusA
LsaOpenPolicy
RegEnumKeyExW

setupapi

CM_Locate_DevNode_ExW
SetupQueueCopyIndirectW
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceDetailW
CM_Enumerate_Classes
SetupDiSetDeviceInstallParamsA
SetupDiCreateDeviceInfoA

kernel32

SetConsoleDisplayMode
VirtualAlloc
GetVersionExA
GetVolumeNameForVolumeMountPointA
InitAtomTable
VerSetConditionMask
IsBadCodePtr
SetCurrentDirectoryW
GetCommTimeouts
GetPrivateProfileSectionW
SetFilePointerEx
IsBadStringPtrA
GetStringTypeW
Process32First
GetVolumeInformationW
GetLargestConsoleWindowSize
SetupComm
OpenSemaphoreW

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 720KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d10689d514eda0f306ba8bc8afbaa3b7

Headers

DLL Characteristics

File Characteristics

Imports

winmm

netapi32

advapi32

setupapi

kernel32

Sections

.text Size: 64KB - Virtual size: 62KB

.sdata Size: 720KB - Virtual size: 1.1MB

.rsrc Size: 144KB - Virtual size: 141KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 64KB - Virtual size: 62KB

.sdata
Size: 720KB - Virtual size: 1.1MB

.rsrc
Size: 144KB - Virtual size: 141KB

.reloc
Size: 4KB - Virtual size: 1KB