32a5739aed670bcef8aca32d837498ecb96af7b22df76c28f8dcc2c43b9d7029

Sharing

Copy URL Twitter E-mail

General

Target

32a5739aed670bcef8aca32d837498ecb96af7b22df76c28f8dcc2c43b9d7029
Size

671KB
MD5

46d8491603081d7e1cb06c16c769bcc0
SHA1

0a51bc802c15a87ebc764e78ae2771fec37dcc3f
SHA256

32a5739aed670bcef8aca32d837498ecb96af7b22df76c28f8dcc2c43b9d7029
SHA512

a8cedb27e99eb2055e1a0267f7fbfc915aea3a5d337bc7724e87aca263f52034ff094e31a19dfb1777e95a4db1394f1759bceddce014f91d6a6b6765307825ec
SSDEEP

12288:zrh3QJvv4ta7Hc/7xa6teIr/CBjbAgAhizSYd+0XAMcETU8a:zrh3QXHc/o6kIr/CBX6xYoS28a

Score

N/A

Malware Config

Signatures

Files

32a5739aed670bcef8aca32d837498ecb96af7b22df76c28f8dcc2c43b9d7029
.exe windows x64

8693ac780d59dd46029fea16552cb2dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

CloseServiceHandle
OpenSCManagerW
OpenServiceW
StartServiceW
QueryServiceStatus
RegFlushKey
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW

kernel32

GetVersionExW
GetLastError
CloseHandle
GetCurrentProcessId
CreateMutexW
CreateFileW
GetLocalTime
GetCurrentThreadId
WriteFile
ReleaseMutex
WaitForSingleObject
SetFilePointer
FreeLibrary
LoadLibraryW
GetTickCount
Sleep
SetLastError
GetProcAddress
LocalFree
FindNextFileW
FormatMessageW
GetFileAttributesExW
FindFirstFileW
GetWindowsDirectoryW
DeleteFileW
SetFileAttributesW
GetCurrentProcess
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapFree
RaiseException
RtlPcToFileHeader
HeapAlloc
RtlLookupFunctionEntry
RtlUnwindEx
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
GetStringTypeW
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery

shlwapi

PathFindFileNameW

setupapi

SetupCloseInfFile
SetupGetLineTextW
SetupOpenInfFileW
InstallHinfSectionW
SetupCopyOEMInfW

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp1
Size: 540KB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8693ac780d59dd46029fea16552cb2dd

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

shlwapi

setupapi

Sections

.text Size: 116KB - Virtual size: 116KB

.data Size: 6KB - Virtual size: 15KB

.pdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.vmp1 Size: 540KB - Virtual size: 1.8MB

.text
Size: 116KB - Virtual size: 116KB

.data
Size: 6KB - Virtual size: 15KB

.pdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB

.vmp1
Size: 540KB - Virtual size: 1.8MB