4bf2b219e1a0fdf2b6cd9344a5fc06a593fe0d84fa2e84a0908cf3d53cad4684

Sharing

Copy URL Twitter E-mail

General

Target

4bf2b219e1a0fdf2b6cd9344a5fc06a593fe0d84fa2e84a0908cf3d53cad4684
Size

680KB
MD5

61626517f222f7353ece5b11ea400939
SHA1

cdd43be5ba8c3b6e6fff4e23939f5d86df72032c
SHA256

4bf2b219e1a0fdf2b6cd9344a5fc06a593fe0d84fa2e84a0908cf3d53cad4684
SHA512

2ac858349771a316c5067b0a860a26e6fdc9bbffd3af9f9672beebbb08c1fc2b62cb9efaed1073f9d9681465ef5612a0fccdbd56fd00d4f1b7936c23b5485e32
SSDEEP

12288:Do8GD+3EaV7dxM+UIS4TAalqMIpcQiwggC0DQ1y/h3TMG01QNLKL:DmD+3L/xuFalNwLDrh36QJ

Score

N/A

Malware Config

Signatures

Files

4bf2b219e1a0fdf2b6cd9344a5fc06a593fe0d84fa2e84a0908cf3d53cad4684
.exe windows x86

fcab6ad32968803cc710906891796c9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerExW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
CloseServiceHandle
StartServiceCtrlDispatcherW
CreateServiceW
QueryServiceConfig2W
ChangeServiceConfig2W
DeleteService
ControlService
RegCreateKeyExW
RegSetValueExW
RegCloseKey
EventRegister
EventUnregister
EventWrite
StartTraceW
ControlTraceW
EnableTraceEx2
TraceSetInformation

kernel32

GetCurrentThreadId
UnregisterWaitEx
OpenProcess
GetLastError
RegisterWaitForSingleObject
CreateThread
GetFileAttributesW
DeleteFileW
WaitForSingleObject
CloseHandle
GetTempPathW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
SetEvent
CreateEventW
GetModuleFileNameW
GetCurrentProcessId
GetComputerNameExW
QueryPerformanceFrequency
GetVersionExW
ExpandEnvironmentStringsW
CreateDirectoryW
RemoveDirectoryW
CreateFileA
WriteConsoleW
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
VirtualQuery
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
WideCharToMultiByte
GetVersionExA
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
ExitProcess
GetStdHandle
WriteFile
GetModuleFileNameA
HeapCreate
VirtualFree
GetFileType
SetHandleCount
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringA
HeapReAlloc
HeapSize
VirtualAlloc
Sleep
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
RtlUnwind
GetLocaleInfoA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA

ole32

CoRevertToSelf
CoImpersonateClient
CoRevokeClassObject
CoResumeClassObjects
CoRegisterClassObject
CoInitializeSecurity
StringFromGUID2
CoCreateGuid
CoUninitialize
CoCreateInstance
CoInitializeEx
CoSuspendClassObjects

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen
SysAllocString

shlwapi

SHDeleteKeyW

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 588KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fcab6ad32968803cc710906891796c9f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

shlwapi

Sections

.text Size: 80KB - Virtual size: 80KB

.data Size: 4KB - Virtual size: 11KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 588KB - Virtual size: 2.3MB

.text
Size: 80KB - Virtual size: 80KB

.data
Size: 4KB - Virtual size: 11KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 588KB - Virtual size: 2.3MB