799cd801994e604920172467709777c527a2c784fc96f3e6ef00ac1853d732da

Sharing

Copy URL

Twitter E-mail

General

Target

799cd801994e604920172467709777c527a2c784fc96f3e6ef00ac1853d732da
Size

564KB
MD5

a0830a7922e001cfeea41bc2647b6320
SHA1

0627b846a961c749889fd11aaf75c7d4f13a45bf
SHA256

799cd801994e604920172467709777c527a2c784fc96f3e6ef00ac1853d732da
SHA512

e9a98003c0539aeffab9f5d89e4dac7e51fe94126fd42c870f63ce72de5b47d2796e5d628951901b4d55fc0f3d6a56c64e5439f077513feb02cb973876edfbbc
SSDEEP

6144:Dgjo44SWd47dTFHVY1OoZqcWffSOt2PKwYA1yonftuVOeJ4FdH9KwqZehhoII5:Ejo4A4RBVckSOqeokVOjdH4IHc5

Score

N/A

Malware Config

Signatures

Files

799cd801994e604920172467709777c527a2c784fc96f3e6ef00ac1853d732da
.exe windows x86

2d2c294e5047effbb26cbf3f1be87970

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetCurrentThread
GetCurrentProcess
lstrlenA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary
DeviceIoControl
GetVersionExA
CreateMutexA
CreateFileMappingA
MapViewOfFile
CreateFileA
GetCurrentProcessId
GetLastError
Sleep
CloseHandle
UnmapViewOfFile
CreateEventA
HeapAlloc
HeapFree
HeapReAlloc
GetStartupInfoA
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
SetFilePointer
RtlUnwind
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
SetStdHandle
HeapSize
FlushFileBuffers

advapi32

RegQueryInfoKeyA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegDeleteValueA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
RegOpenKeyA
RegEnumValueA
RegCloseKey
OpenSCManagerA
OpenServiceA
QueryServiceStatus
CloseServiceHandle
SetServiceStatus
SetSecurityDescriptorDacl
SetEntriesInAclA
BuildExplicitAccessWithNameA
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 508KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2d2c294e5047effbb26cbf3f1be87970

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 840B

.vmp0 Size: 508KB - Virtual size: 1.6MB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 840B

.vmp0
Size: 508KB - Virtual size: 1.6MB