5a85158cecaf45a70b303b3c33d863492d57b7609c78c6a6bafe80470756ee2e

Sharing

Copy URL Twitter E-mail

General

Target

5a85158cecaf45a70b303b3c33d863492d57b7609c78c6a6bafe80470756ee2e
Size

120KB
MD5

7031d83df9ae7f3cbda5c17b92fb2015
SHA1

e3263cdbf80cd99d9fbd07041e3c62bb754b08ef
SHA256

5a85158cecaf45a70b303b3c33d863492d57b7609c78c6a6bafe80470756ee2e
SHA512

7c78f5fda3f3e63c4a055e2d1cd58afadd37725736ccd633bbe4a44b02fc403a8e58ffe4cbfef8581e3f363bb8c1554341e2330189a113a43f14e302ab8353f5
SSDEEP

1536:ZhDQDoEThCpdFbsHloUzEE4Q1pgCvSWUTOcyDHEgk7Uon6ppby1uUHW5PkRGswEv:Z52Sd9sHloUzAsKWLdXhAoiRWpkRHJd

Score

N/A

Malware Config

Signatures

Files

5a85158cecaf45a70b303b3c33d863492d57b7609c78c6a6bafe80470756ee2e
.dll windows x86

73e26cc0b82486cbddec9f04fc7e13ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WideCharToMultiByte
ReleaseSemaphore
DeviceIoControl
GetLastError
GetModuleFileNameA
lstrlenA
GetFileAttributesA
CloseHandle
GetVersionExA
lstrcpyA
CreateFileA
CreateSemaphoreA
Sleep
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

StartServiceA
DeleteService
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegOpenKeyExA
RegSetValueExA
RegCloseKey
CreateServiceA
QueryServiceStatusEx

Exports

Exports

PortIOUtl_AddServiceA
PortIOUtl_AddServiceW
PortIOUtl_DeInit
PortIOUtl_DeInitEx
PortIOUtl_Init
PortIOUtl_InitExA
PortIOUtl_InitExW
PortIOUtl_InputByteValue
PortIOUtl_InputDWordValue
PortIOUtl_InputWordValue
PortIOUtl_OutputByteValue
PortIOUtl_OutputDWordValue
PortIOUtl_OutputWordValue
PortIOUtl_ReadIndexedByte
PortIOUtl_ReadIndexedByteArray
PortIOUtl_ReadIndexedDWord
PortIOUtl_ReadIndexedDWordArray
PortIOUtl_ReadIndexedWord
PortIOUtl_ReadIndexedWordArray
PortIOUtl_RemoveService
PortIOUtl_SendCompalIndexMethodEcCommand
PortIOUtl_SendCompalIndexMethodEcCommandData
PortIOUtl_SendCompalIndexMethodEcCommandDataWithResponse
PortIOUtl_SendCompalIndexMethodEcCommandWithResponse
PortIOUtl_SendECCommand
PortIOUtl_SendECCommandWithResponse
PortIOUtl_SendSpecifiedPortECCommand
PortIOUtl_SendSpecifiedPortECCommandWithResponse
PortIOUtl_SetCompalIndexMethodEcPortType
PortIOUtl_WriteIndexedByte
PortIOUtl_WriteIndexedByteArray
PortIOUtl_WriteIndexedDWord
PortIOUtl_WriteIndexedDWordArray
PortIOUtl_WriteIndexedWord
PortIOUtl_WriteIndexedWordArray

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

73e26cc0b82486cbddec9f04fc7e13ec

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 1016B

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 64KB - Virtual size: 64KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1016B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 64KB