5f219bf535155494978622ab584b0cf0e074738051549c4ee3638f29440c8274

Sharing

Copy URL

Twitter E-mail

General

Target

5f219bf535155494978622ab584b0cf0e074738051549c4ee3638f29440c8274
Size

21KB
MD5

dfd7850ef0ef37b41e9d6052871b308d
SHA1

b636ffc904c592fd5fee9e5c5398ccf3f27ed63d
SHA256

5f219bf535155494978622ab584b0cf0e074738051549c4ee3638f29440c8274
SHA512

05f583be33abe76f740bcddee8183569511937e95a36bfd65e8612c0435a2333b7b4c0c8d00f92170d6ad04d14381ff24c72cd7912fbb2f89a6a814f0fdc0b21
SSDEEP

384:S9tXMPs4BgVnBIfidx8f/KL7aGW7g98tX/3ynZJizrscaeuXaP615jKWZA:gXMPs4BgVnBIfidw/EmGl98XvcbgYcaK

Score

N/A

Malware Config

Signatures

Files

5f219bf535155494978622ab584b0cf0e074738051549c4ee3638f29440c8274
.exe windows x86

b59189c43b01a47f06fed69de6c86d0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
DeleteFileA
MoveFileA
DeleteFileW
GetWindowsDirectoryW
WaitForSingleObject
GlobalMemoryStatusEx
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadPriority
SetPriorityClass
GetThreadPriority
GetCurrentThread
GetPriorityClass
GetCurrentProcess
lstrcpynA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
Sleep
lstrcpyW
MoveFileExA
CopyFileA
GetSystemDirectoryA
FreeResource
SizeofResource
LoadResource
FindResourceA
CreateFileA
Process32Next
lstrcmpiA
Process32First
GetProcAddress
GetLastError
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
DeviceIoControl
GetFullPathNameW
CreateFileW
ExitProcess
InitializeCriticalSection
TerminateProcess
GetSystemInfo
GetVersionExA
GetCurrentProcessId
GetTickCount
TerminateThread
ExitThread
lstrcpyA
WriteFile
PeekNamedPipe
SleepEx
ReadFile
ExpandEnvironmentStringsA
GetFileAttributesA
CloseHandle
CreatePipe
GetStartupInfoA
CreateProcessA
CreateThread
GetTempPathA

user32

wsprintfA
ExitWindowsEx
wsprintfW

advapi32

StartServiceCtrlDispatcherA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
ControlService
CloseServiceHandle
DeleteService
OpenServiceA
OpenSCManagerA
StartServiceA
RegSetValueExA
CreateServiceA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetServiceStatus
RegDeleteKeyW
RegSetValueExW
RegCreateKeyW
RegisterServiceCtrlHandlerA

msvcrt

__p__commode
_exit
??1type_info@@UAE@XZ
_controlfp
__set_app_type
__p__fmode
_CxxThrowException
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
??3@YAXPAX@Z
_except_handler3
??2@YAPAXI@Z
memcpy
rand
srand
time
atoi
malloc
wcstombs
__CxxFrameHandler
_XcptFilter

ws2_32

gethostname
gethostbyname
inet_ntoa
inet_addr
htonl
socket
setsockopt
sendto
recv
send
htons
WSAStartup
closesocket
connect
WSASocketA

wininet

HttpEndRequestA
InternetOpenUrlA
InternetOpenA
InternetSetOptionA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCloseHandle

ntdll

ZwLoadDriver

netapi32

NetUserAdd
NetLocalGroupAddMembers

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b59189c43b01a47f06fed69de6c86d0b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

ws2_32

wininet

ntdll

netapi32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB