f0d25fc4cc44e509735af2a6ce625d82641f228db81b17582a3656856e3fc085

General

Target

f0d25fc4cc44e509735af2a6ce625d82641f228db81b17582a3656856e3fc085
Size

26KB
MD5

08ca8152bfbdc8346d970514e2051541
SHA1

b21434f9d56bf64d7061c283e29ea2aa579afc58
SHA256

f0d25fc4cc44e509735af2a6ce625d82641f228db81b17582a3656856e3fc085
SHA512

5278502d4078a175333ecb986c42663f651df9daeb666805e8f7e23e1c6ad322c23d9b81965c06a22e764bbf5cc859a234d669220864467700d9c05f2e36e734
SSDEEP

768:aH6yBgaoa5QJhJnhTVzWFKk0jsk3Lu+b0SVPUDmJGGXh6z:F1aaVtS0D7NIGPUDb

Score

N/A

Malware Config

Signatures

Files

f0d25fc4cc44e509735af2a6ce625d82641f228db81b17582a3656856e3fc085
.exe windows x86

93121647250073c60811fab41b6ecb97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetFileTime
GetLastError
CloseHandle
GetExitCodeProcess
GetStartupInfoW
LeaveCriticalSection
InterlockedExchange
HeapCreate
InitializeCriticalSection
lstrcpyA
CreateEventA
lstrcatA
GetFileSize
FormatMessageW
GetModuleHandleA
HeapSize
SetFileTime
SetFileTime
IsBadWritePtr
LoadLibraryA
ReadFile

mstscax

DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer

advapi32

RegQueryValueW
CreateProcessAsUserA
ClearEventLogW
InitializeSid
ControlService
IsTextUnicode
IsValidSid
RegDeleteValueA
CreateServiceW
RegEnumKeyA
IsValidSecurityDescriptor
IsValidAcl
RegCreateKeyExW

rasapi32

DwRasUninitialize

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rich
Size: 1KB - Virtual size: 176B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ole
Size: 512B - Virtual size: 112B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

93121647250073c60811fab41b6ecb97

Headers

File Characteristics

Imports

kernel32

mstscax

advapi32

rasapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rich Size: 1KB - Virtual size: 176B

.RSRC Size: 11KB - Virtual size: 11KB

.ole Size: 512B - Virtual size: 112B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rich
Size: 1KB - Virtual size: 176B

.RSRC
Size: 11KB - Virtual size: 11KB

.ole
Size: 512B - Virtual size: 112B