d3c5b19bfced23e2cb54ea9edc95e45953bd7bb2

General

Target

d3c5b19bfced23e2cb54ea9edc95e45953bd7bb2
Size

422KB
MD5

6e76a18ae21dd20ad28e9e560265211f
SHA1

d3c5b19bfced23e2cb54ea9edc95e45953bd7bb2
SHA256

45f6b9203e527bbc326c17cf71d7d1c90dbf336c0fd7b2277a7547f6d0a60fd3
SHA512

c8975f9fd9587293dc8bf0287a1fc4b8a057e3e2c26f3c5c09f1ebb6cba8a929dd7b2142c30c367f89dd3f6de26471d15e3ec0bb1d0dd4e57e3b34b09defeb37
SSDEEP

12288:0b+BL+GyQ+JwWfgtnWOX0/lygvY5xQ4X:0b+F+UJW4X0/Ziq6

Score

N/A

Malware Config

Signatures

Files

d3c5b19bfced23e2cb54ea9edc95e45953bd7bb2
.exe windows x86

c398ebe5b65057682091e7010ab9b897

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
IsIconic
SetSysColors
BeginDeferWindowPos
DeferWindowPos
WindowFromPoint
SetWindowPos
DestroyWindow
ShowWindowAsync
IsZoomed
EnumThreadWindows
GetForegroundWindow
BringWindowToTop
AdjustWindowRectEx

kernel32

GetStartupInfoA
VirtualAllocEx
GetCurrentThreadId
GetComputerNameA
GetTickCount
GetProcAddress
GetModuleHandleA
SetEvent
HeapUnlock
IsBadReadPtr
GlobalFree
GetUserDefaultLCID
LCMapStringA
GlobalAlloc
GetUserDefaultLangID
ReleaseSemaphore
GetLocaleInfoA
LocalFlags

netapi32

NetUserSetGroups
NetGetAnyDCName
NetErrorLogWrite
NetAuditClear
NetErrorLogRead
NetFileGetInfo
Netbios
NetAuditRead
NetConfigGet
NetGetDCName
NetConfigSet
NetFileEnum
NetConfigGetAll

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
fwrite
fread
fputs
_fsopen
fsetpos
free
_XcptFilter
_fullpath
freopen
fputc
fprintf
fopen
ftell

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 385KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c398ebe5b65057682091e7010ab9b897

Headers

File Characteristics

Imports

user32

kernel32

netapi32

msvcrt

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 512B - Virtual size: 308B

.data Size: 385KB - Virtual size: 584KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 512B - Virtual size: 308B

.data
Size: 385KB - Virtual size: 584KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 3KB