986a2e35e739c9e9d134dd321b1dd31e264c9ee5403e72cd2ebdffa97e5fdadf

Sharing

Copy URL

Twitter E-mail

General

Target

986a2e35e739c9e9d134dd321b1dd31e264c9ee5403e72cd2ebdffa97e5fdadf
Size

296KB
MD5

6bd70be48d6e33422ae7988753cc1ff3
SHA1

6d96f916425f67bbabf72df14a70b162471f1f25
SHA256

986a2e35e739c9e9d134dd321b1dd31e264c9ee5403e72cd2ebdffa97e5fdadf
SHA512

5a6b4a1ec98e888ff7b6f4dc06d779c63cce4a73b4155d158d01492321fc5751a24dcee735728957011e3077aa50f425a4e05b9081ef7b99da480f25365b3678
SSDEEP

3072:rbodTV1Cg0W9Ew0UnFH/2NxFX9Df07AbXsliX9GgwYJrIJ6M7M1POE9zHDU9AVTR:rQHnp/yxFXJTT5SuXDXJm5N90NEcf

Score

N/A

Malware Config

Signatures

Files

986a2e35e739c9e9d134dd321b1dd31e264c9ee5403e72cd2ebdffa97e5fdadf
.dll windows x86

2df5f290fbc8f0a03ff7e69eb3574cb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetSystemInfo
GetLastError
CreateDirectoryA
WriteFile
CreateFileA
DeviceIoControl
CloseHandle
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetVersionExA
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
ReadFile
GetCurrentThreadId
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetFilePointer
SetStdHandle

user32

wsprintfA

advapi32

OpenServiceA
CloseServiceHandle
DeleteService
CreateServiceA
StartServiceA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA

ole32

CoCreateInstance
CoInitialize

oleaut32

VariantClear
SysAllocStringLen
SysFreeString

Exports

Exports

pmf0
pmf1

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2df5f290fbc8f0a03ff7e69eb3574cb5

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 18KB

.reloc Size: 8KB - Virtual size: 6KB

.text Size: 172KB - Virtual size: 172KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 18KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 172KB - Virtual size: 172KB