25e4496f6177ecb05941fe8b46630b6766431e0cfbbbf6ab8738b6c795228220

General

Target

25e4496f6177ecb05941fe8b46630b6766431e0cfbbbf6ab8738b6c795228220
Size

79KB
MD5

41e7e72b00c03a48b7e4bf71c2df08dc
SHA1

3202c5aa6e08582d613b862befeca0377dbb40a3
SHA256

25e4496f6177ecb05941fe8b46630b6766431e0cfbbbf6ab8738b6c795228220
SHA512

d35052eadc0269b10b526887bf00f7d1b8bc09f186ea5a4be648cc91b9853d1a0cdbb2596b7eab974280fb55c98fbc55c53d728dbe04c878a861886848ebc745
SSDEEP

1536:h9Ja1RFXm1D42JNZ6WGw3hwQDBX3pTdcZMRI64CWwEjDOTabY09g:h9Ja1RZm19UYhwGBXHcZMRI64eEjDOCg

Score

N/A

Malware Config

Signatures

Files

25e4496f6177ecb05941fe8b46630b6766431e0cfbbbf6ab8738b6c795228220
.exe windows x86

253eb5d639d30575e513931356b1adef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetFileTime
SetFileTime
lstrcpyA
InterlockedExchange
IsBadWritePtr
HeapCreate
GetFileSize
GetLastError
InitializeCriticalSection
ReadFile
FormatMessageW
LoadLibraryA
CreateEventA
GetExitCodeProcess
CloseHandle
GetModuleHandleA
SetFileTime
LeaveCriticalSection
HeapSize
lstrcatA
GetStartupInfoW

mstscax

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

advapi32

ClearEventLogW
RegQueryValueW
RegDeleteValueA
RegEnumKeyA
RegCreateKeyExW
ControlService
CreateProcessAsUserA
InitializeSid
IsValidSecurityDescriptor
IsTextUnicode
CreateServiceW
IsValidAcl
IsValidSid

rasapi32

DwRasUninitialize

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rich
Size: 1KB - Virtual size: 176B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ole
Size: 512B - Virtual size: 112B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

253eb5d639d30575e513931356b1adef

Headers

File Characteristics

Imports

kernel32

mstscax

advapi32

rasapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rich Size: 1KB - Virtual size: 176B

.RSRC Size: 65KB - Virtual size: 64KB

.ole Size: 512B - Virtual size: 112B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rich
Size: 1KB - Virtual size: 176B

.RSRC
Size: 65KB - Virtual size: 64KB

.ole
Size: 512B - Virtual size: 112B