6d5f0bad68d6bee90160fea9b2682ebda4268c9fbcb44f3a84a433cf1fc74d43

Sharing

Copy URL Twitter E-mail

General

Target

6d5f0bad68d6bee90160fea9b2682ebda4268c9fbcb44f3a84a433cf1fc74d43
Size

180KB
MD5

6ea877ae1f45b7c986804282f107de5c
SHA1

ac2ce70f00f09051ec719c2174c7e1fe983fcf57
SHA256

6d5f0bad68d6bee90160fea9b2682ebda4268c9fbcb44f3a84a433cf1fc74d43
SHA512

98224e5d3348343870fb66da1674aecdb86758bf2f9068dcf716e3ba036fe18a32721c32e2bec138ce9ea8969d696ef54bedfbbc2f1863900d38835816210284
SSDEEP

3072:pZkfP7dy2NmCa4fSdV0D70WWY/7Xx+sQqiDVRs0Hvcdavjl:pZkfP7dxe4ab0D70W3/7h+X

Score

N/A

Malware Config

Signatures

Files

6d5f0bad68d6bee90160fea9b2682ebda4268c9fbcb44f3a84a433cf1fc74d43
.dll windows x86

43864e85db71da0698605c9915d7ef52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
CreateTimerQueueTimer
InterlockedDecrement
GetSystemTimeAsFileTime
lstrcmpiA
WaitForSingleObject
ReleaseMutex
CreateFileW
DeleteTimerQueueTimer
CreateFileA
DeviceIoControl
GetLastError
CloseHandle
Sleep
OutputDebugStringA
GetStartupInfoA
WideCharToMultiByte
MultiByteToWideChar
LocalAlloc
LocalFree
DisableThreadLibraryCalls
CreateMutexA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
lstrlenW
SetUnhandledExceptionFilter

user32

CharUpperA
LoadIconA

advapi32

RegQueryValueExW
AdjustTokenPrivileges
QueryServiceStatus
ControlService
RegOpenKeyW
RegDeleteValueW
RegCreateKeyW
OpenProcessToken
LookupPrivilegeValueW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegCreateKeyExW
RegSetValueExW
RegCloseKey

ole32

CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitializeEx

Exports

Exports

SnowShow1

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata2
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43864e85db71da0698605c9915d7ef52

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Exports

Exports

Sections

.rdata Size: 4KB - Virtual size: 1KB

.xdata Size: 4KB - Virtual size: 448KB

.INIT Size: 4KB - Virtual size: 64B

.code Size: 16KB - Virtual size: 15KB

.rdata2 Size: 112KB - Virtual size: 108KB

.rsrc Size: 32KB - Virtual size: 29KB

.reloc Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 1KB

.xdata
Size: 4KB - Virtual size: 448KB

.INIT
Size: 4KB - Virtual size: 64B

.code
Size: 16KB - Virtual size: 15KB

.rdata2
Size: 112KB - Virtual size: 108KB

.rsrc
Size: 32KB - Virtual size: 29KB

.reloc
Size: 4KB - Virtual size: 1KB