be43fc4a860156c98f0e8d03183fca624c9c03ce4bcb92b18abe1ead48cbbd72

Sharing

Copy URL Twitter E-mail

General

Target

be43fc4a860156c98f0e8d03183fca624c9c03ce4bcb92b18abe1ead48cbbd72
Size

144KB
MD5

8439ac7074784bbdc23065d656b6b1b3
SHA1

7c47a3154e8ac9cb6da864520451fbc611ea8051
SHA256

be43fc4a860156c98f0e8d03183fca624c9c03ce4bcb92b18abe1ead48cbbd72
SHA512

bbe2ba19d289c9e579b7f8d69f2a98e6705d21f02dc4eee6568bc4a49f29fcb115eb26ca4443acb1b06b78ea404c324fc8eedbcf406bc658a633d524aade6ff8
SSDEEP

3072:W/eS+C8k/dLf8DgzX8P/aConm3CQzPbwVNIq7Z:WmitWGMPVhzMN

Score

N/A

Malware Config

Signatures

Files

be43fc4a860156c98f0e8d03183fca624c9c03ce4bcb92b18abe1ead48cbbd72
.dll windows x86

ef0f529ffe22d971ec0284c3c28281e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueW
RegEnumKeyExA
LockServiceDatabase
RegQueryValueExW
AllocateAndInitializeSid
RegQueryInfoKeyW

version

VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueW

kernel32

RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetHandleInformation
GetProcAddress
GetModuleHandleA
IsValidLocale
VirtualAlloc
GetVersionExW
GetThreadTimes
SizeofResource
HeapSize
GetLocaleInfoA
CreateFileA
lstrcatA
GlobalAlloc
CopyFileA
GetSystemTime
LCMapStringW
WriteFile
lstrcmpiA
ReleaseMutex
GetTempFileNameW
WriteConsoleW
SetPriorityClass
SearchPathA
QueryPerformanceCounter
GetProcessHeap
CreateFileMappingW
GetSystemTimeAsFileTime
LockResource
lstrcpyA
CreateEventA
WriteConsoleA
CompareStringA
SetCurrentDirectoryA
HeapFree
GetFileSize
GetTickCount
GetModuleHandleW
ExitProcess
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
CloseHandle
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
SetEndOfFile
ReadFile
SetFilePointer

Exports

Exports

hyjop

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef0f529ffe22d971ec0284c3c28281e5

Headers

File Characteristics

Imports

advapi32

version

kernel32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 52KB - Virtual size: 54KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 52KB - Virtual size: 54KB

.reloc
Size: 12KB - Virtual size: 8KB