be7e0d721437853e231f4b8dbc805b588ffc72f211e15e58075fc3cfa2ef5919

General

Target

be7e0d721437853e231f4b8dbc805b588ffc72f211e15e58075fc3cfa2ef5919
Size

48KB
MD5

79aad8f74ff86beff8b552eed4403440
SHA1

82a5ba1123674dcfa93b4d9436fcd6686fd669e2
SHA256

be7e0d721437853e231f4b8dbc805b588ffc72f211e15e58075fc3cfa2ef5919
SHA512

a22971f62d291aea4921df8601d1ea5f135c3df7c7c08971143663aa751004d1137021c89be32977af4df35cb14bfe6023296475c775316c02edf7db851f00f2
SSDEEP

768:f000JaZQ9l93nKSXQSlz8OM73Po957HavSx3GY3OKGLuCfp7odf3b8E:By9l93Kklz3M76576vH2/oKdf3

Score

N/A

Malware Config

Signatures

Files

be7e0d721437853e231f4b8dbc805b588ffc72f211e15e58075fc3cfa2ef5919
.exe windows x86

97ef11e5b55c4d5114069d4cebc6fcb4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
SetErrorMode
GetProcAddress
LoadLibraryW
GetModuleHandleW
lstrcpyW
lstrlenW
lstrcatW
GetSystemDirectoryW
GetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
ExitProcess
EnterCriticalSection
GetModuleHandleA
LeaveCriticalSection
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
Sleep
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InterlockedExchange
VirtualQuery
GetSystemInfo

advapi32

SetServiceStatus
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW

ntdll

DbgPrint
RtlUnwind

rpcrt4

RpcMgmtWaitServerListen
RpcServerListen
RpcMgmtStopServerListening

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

97ef11e5b55c4d5114069d4cebc6fcb4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ntdll

rpcrt4

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 28KB - Virtual size: 29KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 28KB - Virtual size: 29KB