c0251ac050ae98a826663131a6f3f381ac0efb439b4900c1b9948aa059ea51fd

Sharing

Copy URL Twitter E-mail

General

Target

c0251ac050ae98a826663131a6f3f381ac0efb439b4900c1b9948aa059ea51fd
Size

413KB
MD5

7977ff45de07fc875ec41a4f9452de10
SHA1

fd8129983d48af65ab82bba86d8bdae140861599
SHA256

c0251ac050ae98a826663131a6f3f381ac0efb439b4900c1b9948aa059ea51fd
SHA512

82b74d2282977cfe09aa5620a419dea4a65241ea891654bb48345f40508608113ba4038bf263a561e74e520c147a517a2c348b0e3cd35690248b9b8265043390
SSDEEP

12288:AbzpBt8JLTx2c4ShJ74QRR0IA+Emk3usqO1PaGq:ARBt8J3xESX0IA+EBvb1PaGq

Score

N/A

Malware Config

Signatures

Files

c0251ac050ae98a826663131a6f3f381ac0efb439b4900c1b9948aa059ea51fd
.exe windows x86

16cc68e638726c0215dc767e97f75a24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
lstrlenA
LocalFree
GetModuleFileNameA
GetVersionExA
QueryPerformanceFrequency
WaitForSingleObject
CreateEventA
CreateFileA
ResetEvent
DeviceIoControl
WaitForMultipleObjects
GetLastError
Sleep
CancelIo
CloseHandle
SetEvent
FlushFileBuffers
WriteConsoleW
HeapFree
HeapAlloc
ExitThread
ResumeThread
CreateThread
GetProcAddress
GetModuleHandleA
ExitProcess
GetCommandLineA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
RaiseException
WriteFile
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP

advapi32

SetSecurityDescriptorDacl
SetServiceStatus
DeregisterEventSource
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenServiceA
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegisterEventSourceA
ReportEventA
InitializeSecurityDescriptor

avrt

AvSetMmThreadCharacteristicsA
AvRevertMmThreadCharacteristics

ole32

CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16cc68e638726c0215dc767e97f75a24

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

avrt

ole32

Sections

.text Size: 83KB - Virtual size: 82KB

.rdata Size: 286KB - Virtual size: 286KB

.data Size: 6KB - Virtual size: 29KB

.rsrc Size: 36KB - Virtual size: 36KB

.text
Size: 83KB - Virtual size: 82KB

.rdata
Size: 286KB - Virtual size: 286KB

.data
Size: 6KB - Virtual size: 29KB

.rsrc
Size: 36KB - Virtual size: 36KB