21d3063bc7764622d5b0eba9799cc8ecc84d9d09cd5aa94e24f3d4314cdd73bd[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

21d3063bc7764622d5b0eba9799cc8ecc84d9d09cd5aa94e24f3d4314cdd73bd.bin
Size

252KB
MD5

f8dbf0b94e04175b15cf388ee47906ff
SHA1

1555a3fc5193e949ad2ffd89de5bfae1300bd950
SHA256

21d3063bc7764622d5b0eba9799cc8ecc84d9d09cd5aa94e24f3d4314cdd73bd
SHA512

b64d46c7c5ce0a9a8bfaba07779b5e9b8a273ab1d1a2f953afaceb45964fae1daf5e0a4d6a5f40a5145d969978d4905fb20463786e4e9e82c709dac72c013231
SSDEEP

6144:v08e/s6lzTWj213ulLWErzzPOUwgHfXW+AsdN3UN/SyU47:vY/s0zxYlLWErPOUwsfXW+ZdN3UUNg

Score

N/A

Malware Config

Signatures

Files

21d3063bc7764622d5b0eba9799cc8ecc84d9d09cd5aa94e24f3d4314cdd73bd.bin
.exe windows x64

710bf5e8b2d5eedfa0fdef65846dd2fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

ChangeServiceConfig2A
ChangeServiceConfigA
CloseServiceHandle
OpenSCManagerA
OpenServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

kernel32

CreateEventA
DeleteCriticalSection
EnterCriticalSection
GetLastError
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
SetEvent
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 416B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

710bf5e8b2d5eedfa0fdef65846dd2fa

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 236KB - Virtual size: 236KB

.rdata Size: 1KB - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 696B

.xdata Size: 1024B - Virtual size: 528B

.bss Size: - Virtual size: 416B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 124B

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 236KB - Virtual size: 236KB

.rdata
Size: 1KB - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 696B

.xdata
Size: 1024B - Virtual size: 528B

.bss
Size: - Virtual size: 416B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 124B