d7535c1420da609e8ebb218118b674f07ef017e79f446510cccb5582c8fe3476

General

Target

d7535c1420da609e8ebb218118b674f07ef017e79f446510cccb5582c8fe3476
Size

92KB
MD5

6fa68972907c251dcc9fc0f3e8d56b1a
SHA1

a6ee6300b25fe54ed3d28169bcba2ef0dfae9d01
SHA256

d7535c1420da609e8ebb218118b674f07ef017e79f446510cccb5582c8fe3476
SHA512

9df31d27ab05cbaff609a6671a2902d70cbe9012842a518bfb31f27a20f5a6851c6eff82c9799e823672017d1df19b5ba326c749f6e7d373584b2d4214f3c8a5
SSDEEP

1536:Xa2R2mcUCbuRBCUNZyvYii6lFVRYaWcp4rMw0eo:EUbrNOS6vVFZQJ0eo

Score

N/A

Malware Config

Signatures

Files

d7535c1420da609e8ebb218118b674f07ef017e79f446510cccb5582c8fe3476
.exe windows x86

7328677cbba33f443f1ff2bacb87401d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableW
GetProfileStringW
GetModuleHandleW
GetStartupInfoW

advapi32

SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
QueryServiceStatus
OpenThreadToken
OpenServiceW
OpenSCManagerW
LookupPrivilegeValueW
CreateServiceW
ControlService
SetServiceStatus
SetEntriesInAclW
RegisterServiceCtrlHandlerW
RegSetValueExW
RegEnumKeyW
InitializeSecurityDescriptor
StartServiceCtrlDispatcherW
OpenProcessToken
FreeSid
AllocateAndInitializeSid
RegQueryValueExW

ole32

OleCreate
CoInitialize
StgCreateDocfile
CoSuspendClassObjects
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree

ws2_32

connect
accept
closesocket
bind
socket
getservbyname
htons
recv
send
recvfrom
htonl
gethostbyaddr

uxtheme

DrawThemeBackground
GetThemeBackgroundRegion
CloseThemeData
GetThemeTextExtent

msvcrt

realloc
_onexit
__dllonexit
_controlfp
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
__set_app_type
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
fopen
fseek
fread
fclose
strncmp
__p__fmode
atoi
exit
free
malloc

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 509KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7328677cbba33f443f1ff2bacb87401d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

ws2_32

uxtheme

msvcrt

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 52KB - Virtual size: 48KB

.data Size: 28KB - Virtual size: 509KB

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 52KB - Virtual size: 48KB

.data
Size: 28KB - Virtual size: 509KB