eafbfea4aa28e7c7387ff839444c3694b718ccd396079cbf751188683e04b254

Sharing

Copy URL

Twitter E-mail

General

Target

eafbfea4aa28e7c7387ff839444c3694b718ccd396079cbf751188683e04b254
Size

150KB
MD5

4dd8bdc201f5e9ca8c8bf07a183aacf0
SHA1

6fc78258ad2fade11a74a3a3edc22554e5ef2dc0
SHA256

eafbfea4aa28e7c7387ff839444c3694b718ccd396079cbf751188683e04b254
SHA512

96a013ced6f2165d2e48a57f1861c272730c9914da799ffce56df56cbf28872b9d8dcaa6f9d372fa0d828f9becf2256771f322dfab96e2093aacb73050e6377e
SSDEEP

3072:Rs7c2VFa1bHk8vdIYJxgqLWcUJlx+SPeOQbj6uOTEDqYO/aamofo6z:a7c8kzBvdIoxLW1mSsbbOT5/aamDe

Score

N/A

Malware Config

Signatures

Files

eafbfea4aa28e7c7387ff839444c3694b718ccd396079cbf751188683e04b254
.exe windows x86

3ee621f86bd119700d7aa12cba17936b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_amsg_exit
_ftol
_commit
_isatty
wcschr
srand
_rotl
_write
_vsnprintf
_access
_rotr
__p__iob
_CIacos
tolower
__p__osver
malloc
fread
ctime

user32

IsIconic
ExitWindowsEx
CheckRadioButton
InvalidateRect
CharLowerW
SetFocus
EqualRect
DialogBoxParamW
GetWindow
PostQuitMessage
SetWindowLongW
GetWindowTextW
GetWindowTextLengthW
DrawTextW
PostMessageW
GetWindowLongW
CallNextHookEx
GetFocus
GetClassNameW
SetWindowTextA
GetDlgItemTextW
EnumChildWindows
CharNextA
EnableMenuItem
SendDlgItemMessageW
GetParent
GetClassNameA
CallWindowProcW

kernel32

GetFileSize
ExpandEnvironmentStringsW
GetVersionExA
IsBadReadPtr
GetEnvironmentStringsW
SetFileAttributesA
ResetEvent
FileTimeToLocalFileTime
IsBadWritePtr
CreateDirectoryW
VirtualAlloc
InitializeCriticalSection
WaitForMultipleObjects
GetCommandLineA
GetWindowsDirectoryW
GetModuleHandleW
GetVersionExW
GlobalUnlock
GetVersion
GetCurrentProcessId
QueryPerformanceCounter
GetSystemTimeAsFileTime
lstrcmpiA
lstrcatW
GetTickCount
GetConsoleMode
CompareStringA
HeapReAlloc
GetFileAttributesA
GetProcessHeap
VirtualQuery
FindFirstFileW
FindNextFileA
DeleteFileW
FindResourceA
CreateProcessW
UnhandledExceptionFilter
CreateFileMappingW
OutputDebugStringA
DeleteCriticalSection
LoadLibraryExW
MapViewOfFile
WriteConsoleW
LockResource
GetLastError
FindNextFileW
ExitProcess

advapi32

GetSecurityDescriptorLength
AdjustTokenPrivileges
GetSecurityDescriptorOwner
RegSetValueExA
QueryServiceStatus
MakeSelfRelativeSD
GetSecurityDescriptorDacl
SetServiceStatus
GetAclInformation
GetTraceEnableLevel
CryptAcquireContextA
RegQueryValueA
RegEnumValueW
IsValidSecurityDescriptor
RegCreateKeyA
InitializeSecurityDescriptor
GetSidSubAuthorityCount
RegEnumKeyExW
GetSecurityDescriptorControl
RegQueryValueExW
RegOpenKeyA
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExW
RegQueryValueW
CryptGenRandom
AddAce
OpenSCManagerW
GetUserNameW
QueryServiceConfigW
RegQueryInfoKeyW
GetTraceEnableFlags
CryptCreateHash
DuplicateTokenEx
StartServiceW
UnlockServiceDatabase
LsaQueryInformationPolicy
LsaClose

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textbss
Size: 512B - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ee621f86bd119700d7aa12cba17936b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

kernel32

advapi32

Sections

.text Size: 136KB - Virtual size: 135KB

.tls Size: 512B - Virtual size: 137B

.textbss Size: 512B - Virtual size: 126KB

BSS Size: 512B - Virtual size: 76B

.bss Size: 512B - Virtual size: 109B

.bss Size: 512B - Virtual size: 97B

.tls Size: 512B - Virtual size: 37KB

.tls Size: 512B - Virtual size: 77B

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 136KB - Virtual size: 135KB

.tls
Size: 512B - Virtual size: 137B

.textbss
Size: 512B - Virtual size: 126KB

BSS
Size: 512B - Virtual size: 76B

.bss
Size: 512B - Virtual size: 109B

.bss
Size: 512B - Virtual size: 97B

.tls
Size: 512B - Virtual size: 37KB

.tls
Size: 512B - Virtual size: 77B

.rsrc
Size: 9KB - Virtual size: 9KB