7aa50ec1ee9f3bbf07e1defe3174522cff3f39ccbb3d59c7fb6f59402b548b72

Sharing

Copy URL Twitter E-mail

General

Target

7aa50ec1ee9f3bbf07e1defe3174522cff3f39ccbb3d59c7fb6f59402b548b72
Size

208KB
MD5

a06a853aa315a5989adf1d07798b7290
SHA1

0f425e7504d4c740e8f02a34246a09b1e9141355
SHA256

7aa50ec1ee9f3bbf07e1defe3174522cff3f39ccbb3d59c7fb6f59402b548b72
SHA512

e06fc52347f0b2e5c547ae5087cd1955e49168ec98e6ee2dfde9a2edfdf1a690a1668c7b918235f6732f4e28acc4dd8d5ae626c437b7b90c4b454e8c1ba45228
SSDEEP

3072:xarZXmRfdxW/6yeRLmRs6v9IuR5Lzd0MWqIwY6Cht5CIRg/ty+ie:YNXUFA0mRRtHZJ7Y6ChtjRg4f

Score

N/A

Malware Config

Signatures

Files

7aa50ec1ee9f3bbf07e1defe3174522cff3f39ccbb3d59c7fb6f59402b548b72
.dll windows x86

5d4809e8d1e2694cb87e16ed8756e135

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject
SetEvent
FreeLibrary
CloseHandle
Sleep
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetLastError
ResetEvent
InterlockedExchange
CancelIo
GetTickCount
GetLocalTime
GetCurrentProcessId
lstrcmpA
GetPrivateProfileStringA
GetVersionExA
lstrcatA
GetWindowsDirectoryA
WideCharToMultiByte
MultiByteToWideChar
DeleteFileA
CreateDirectoryA
GetFileAttributesA
lstrcpyA
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
LocalReAlloc
LocalAlloc
GetFileSize
ReadFile
SetFilePointer
MoveFileA
CreateProcessA
CreateThread
InitializeCriticalSection
lstrcmpiA
MapViewOfFile
CreateFileMappingA
HeapFree
UnmapViewOfFile
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetStartupInfoA
WaitForMultipleObjects
LocalSize
TerminateProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentThreadId
OutputDebugStringA
GetSystemInfo
GetComputerNameA
OpenEventA
SetErrorMode
CopyFileA
ExpandEnvironmentStringsA
CreateFileA
RtlUnwind
RaiseException
HeapAlloc
TlsSetValue
TlsGetValue
ExitThread
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
TlsAlloc
TlsFree
SetLastError
ExitProcess
SetUnhandledExceptionFilter
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
LCMapStringA
LCMapStringW

netapi32

NetLocalGroupAddMembers
NetUserAdd

Exports

Exports

CanUnloadNow
CreateMsgHistory
CreatePluginModule
GetClassObject
PINhh
RegisterServer
ServiceMain

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d4809e8d1e2694cb87e16ed8756e135

Headers

File Characteristics

Imports

kernel32

netapi32

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 152KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 26KB - Virtual size: 35KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 152KB - Virtual size: 152KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 26KB - Virtual size: 35KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 11KB