7c48875c2eca5422880d35a071c1d6a02a019e90c1d32ab099448a3ecea03d68

Sharing

Copy URL

Twitter E-mail

General

Target

7c48875c2eca5422880d35a071c1d6a02a019e90c1d32ab099448a3ecea03d68
Size

128KB
MD5

8145b5abaa44f3e58cb507c5e808db2c
SHA1

30e9649ff8810ea872c0b7a45c75bd02758fa680
SHA256

7c48875c2eca5422880d35a071c1d6a02a019e90c1d32ab099448a3ecea03d68
SHA512

34abfeb0527ad6ccad6e3923437cc5baf0c8d17fd8edad75c94e11ff1d77ab79d1afd10b35b1f20be94897d6cb02e9e7fb4e3d766c916e2abb15ade7623a031e
SSDEEP

1536:3lhtPR0fzM5ZgONxnasldT7xIgMgcGwt9oEIwIO85WIyHhMHMgg6lr6QQ8MdiO:z02ZksiOxwt9oEIwIOxlhXm6PBiO

Score

N/A

Malware Config

Signatures

Files

7c48875c2eca5422880d35a071c1d6a02a019e90c1d32ab099448a3ecea03d68
.exe windows x86

189c1b627c924075480b4d8831c54a7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

atl

ord23
ord16
ord57
ord17
ord18
ord20

kernel32

GetCurrentThread
GetLastError
GetLocalTime
DeviceIoControl
ConnectNamedPipe
GetCurrentProcess
DisconnectNamedPipe
Sleep
CreateFileA
ReadFile
CreateNamedPipeA
GetModuleFileNameA
lstrlenA
GetCommandLineA
lstrcmpiA
GetCurrentThreadId
CloseHandle
InterlockedDecrement
GetStringTypeW
WriteFile
GetEnvironmentVariableA
TerminateProcess
HeapFree
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
IsBadReadPtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
InterlockedIncrement
SetUnhandledExceptionFilter
FlushFileBuffers
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

user32

LoadStringA
PostThreadMessageA
DispatchMessageA
GetMessageA
CharNextA

advapi32

GetTokenInformation
StartServiceCtrlDispatcherA
CloseServiceHandle
ControlService
OpenSCManagerA
DeregisterEventSource
OpenThreadToken
OpenProcessToken
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
GetLengthSid
CopySid
RegOpenKeyExA
StartServiceA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
OpenServiceA
DeleteService
CreateServiceA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegisterEventSourceA
ReportEventA

ole32

CoInitialize
CoUninitialize
CoInitializeSecurity

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

189c1b627c924075480b4d8831c54a7e

Headers

File Characteristics

Imports

atl

kernel32

user32

advapi32

ole32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 76KB - Virtual size: 81KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 76KB - Virtual size: 81KB

.rsrc
Size: 4KB - Virtual size: 2KB