b1045852e400e7e0a050f0c932867073274163f2f3742f313c0f148ed729b3c1

General

Target

b1045852e400e7e0a050f0c932867073274163f2f3742f313c0f148ed729b3c1
Size

801KB
MD5

db30a561274b0d58a22b6ca529d24b99
SHA1

963eb2bb672e319fd1cbaa7846c7b3c27608bcee
SHA256

b1045852e400e7e0a050f0c932867073274163f2f3742f313c0f148ed729b3c1
SHA512

13e2b02b10b7c73a2033069163a6882a0639230399d1b5ffdee32b599880905aeac6997731aa32bd16ffad3c9e59667c678bd23b73f9eb10846bf4434ab463b9
SSDEEP

24576:osJxPD4xb1gwbxcmNxb6dhHUIIlR+aCoANS+Na3CmgmIQA:osPsxbaw9I433nM

Score

N/A

Malware Config

Signatures

Files

b1045852e400e7e0a050f0c932867073274163f2f3742f313c0f148ed729b3c1
.exe windows x86

868b6d0080cafd687019ca16349f211d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
CreateEventA
FormatMessageW
LeaveCriticalSection
GetFileSize
ReadFile
CloseHandle
InterlockedExchange
HeapSize
SetFileTime
InitializeCriticalSection
HeapCreate
GetModuleHandleA
GetExitCodeProcess
GetStartupInfoW
LoadLibraryA
SetFileTime
IsBadWritePtr
lstrcpyA
SetFileTime
lstrcatA

mstscax

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

advapi32

RegEnumKeyA
RegDeleteValueA
IsValidSid
ClearEventLogW
IsTextUnicode
RegCreateKeyExW
CreateProcessAsUserA
IsValidSecurityDescriptor
IsValidAcl
CreateServiceW
ControlService
InitializeSid
RegQueryValueW

rasapi32

DwRasUninitialize

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 728KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rich
Size: 1KB - Virtual size: 176B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 787KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ole
Size: 512B - Virtual size: 112B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

868b6d0080cafd687019ca16349f211d

Headers

File Characteristics

Imports

kernel32

mstscax

advapi32

rasapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 728KB

.data Size: 4KB - Virtual size: 3KB

.rich Size: 1KB - Virtual size: 176B

.RSRC Size: 787KB - Virtual size: 1.5MB

.ole Size: 512B - Virtual size: 112B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 728KB

.data
Size: 4KB - Virtual size: 3KB

.rich
Size: 1KB - Virtual size: 176B

.RSRC
Size: 787KB - Virtual size: 1.5MB

.ole
Size: 512B - Virtual size: 112B