0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f

Sharing

Copy URL

Twitter E-mail

General

Target

0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f
Size

75KB
MD5

ee9c6e60027c8ce65003de32d6125914
SHA1

97872dbc8df6d6c4cc6419e81994336503c748f9
SHA256

0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f
SHA512

78b53a0b34ffca4bc07b318ae8d23c3a74a9fb3ab2801e25888f1cf7690cb8ed72460ff36d11b3ddeebfd15e2a62e353efb63b7a9c2ae2a15607875ca1052bb3
SSDEEP

768:FbzkUtPX9DUetap1YOc8tmmSuDsCHJexou+nPp18vjILhussGdamRv5qmppQHUdv:SaX1LGfDpRRuI0PuvtOuSG4yr

Score

1^/10

Malware Config

Signatures

Files

0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f
.exe windows x64

200928216c27c7644c19b0beec4e3fd5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

oleaut32

SysAllocString
SysFreeString

mpr

WNetCancelConnection2W
WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum
WNetAddConnection2W

ole32

CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity

user32

wsprintfW

netapi32

NetApiBufferFree
NetShareEnum
NetGetJoinInformation
NetGetDCName

ntdll

RtlGetNativeSystemInformation
RtlVirtualUnwind
RtlGetVersion
ZwQuerySystemInformation

advapi32

GetUserNameW
LookupAccountSidW
GetTokenInformation
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
StartServiceW
QueryServiceStatusEx
OpenServiceA
OpenSCManagerW
OpenSCManagerA
EnumServicesStatusA
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW

activeds

ord9

msvcrt

feof
fgetws
_getch
fclose
_vsnwprintf
memset
_wfopen

shell32

CommandLineToArgvW
ord680

shlwapi

StrStrIW
SHRegSetUSValueW
StrChrW
StrCmpIW
StrStrIA
StrCmpNIW

kernel32

DeleteFileW
GlobalMemoryStatus
CopyFileW
GetStdHandle
WaitForSingleObject
CreateEventA
CreateThread
GetTickCount64
CreateSemaphoreA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
AllocConsole
WriteConsoleW
GetConsoleScreenBufferInfo
SetFileAttributesW
DeviceIoControl
lstrcmpiW
ResetEvent
TerminateThread
GetFileSizeEx
ReadFile
SetConsoleCursorPosition
GetComputerNameW
lstrcmpiA
GetSystemInfo
CreateProcessW
GetTempPathW
GetModuleFileNameW
SetEndOfFile
OpenProcess
TerminateProcess
GetComputerNameA
lstrlenA
TlsAlloc
SetErrorMode
ExitProcess
ReleaseSemaphore
SetEvent
GetCommandLineW
GetDriveTypeW
TlsSetValue
TlsGetValue
SetFilePointerEx
SetFileInformationByHandle
GetCurrentProcess
HeapAlloc
GetProcessHeap
lstrcpyW
lstrcatW
lstrlenW
FindClose
FindFirstFileW
FindNextFileW
GetVolumeInformationW
GetLastError
HeapFree
CreateFileW
WriteFile
CloseHandle
SetLastError
HeapReAlloc
GetCurrentProcessId
WideCharToMultiByte
Sleep
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.c
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.r
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

200928216c27c7644c19b0beec4e3fd5

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

mpr

ole32

user32

netapi32

ntdll

advapi32

activeds

msvcrt

shell32

shlwapi

kernel32

Sections

.text Size: 6KB - Virtual size: 6KB

.c Size: 23KB - Virtual size: 23KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1KB - Virtual size: 1KB

.r Size: 18KB - Virtual size: 17KB

.d Size: 18KB - Virtual size: 17KB

.reloc Size: 512B - Virtual size: 348B

.text
Size: 6KB - Virtual size: 6KB

.c
Size: 23KB - Virtual size: 23KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1KB - Virtual size: 1KB

.r
Size: 18KB - Virtual size: 17KB

.d
Size: 18KB - Virtual size: 17KB

.reloc
Size: 512B - Virtual size: 348B