20200af0c2b0cedbc071bbf4761aff998aa23ea7ad75cc1cb0df56789ddf9ddf

Sharing

Copy URL Twitter E-mail

General

Target

20200af0c2b0cedbc071bbf4761aff998aa23ea7ad75cc1cb0df56789ddf9ddf
Size

162KB
MD5

a3a5eb40e95e2dd6e6feb98512ca31da
SHA1

57e75c2e67389b1045ad17cfe9c1a6fd7b488c96
SHA256

20200af0c2b0cedbc071bbf4761aff998aa23ea7ad75cc1cb0df56789ddf9ddf
SHA512

99385dd14851c22c96ebaf0be4835841e7acadd37fa2cd42a76a7d8b58ed5e048678269ddc1fc8c363314508911e2ff427c01b5378d7686ed830d951da36e84f
SSDEEP

3072:kAl8VrDBKdvttDzQyKJCjGgvL8w6CmRLfGAJWFCy/EF:v8FIZjiJCjGp+AJSq

Score

N/A

Malware Config

Signatures

Files

20200af0c2b0cedbc071bbf4761aff998aa23ea7ad75cc1cb0df56789ddf9ddf
.exe windows x86

e1c8cc9a299f7557474701f48838350a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

TraceMessage
RegCloseKey
RegSetValueExW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
StartServiceCtrlDispatcherW
RegOpenKeyExW
SetServiceStatus
RegisterServiceCtrlHandlerExW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
OpenThreadToken
FreeSid
CheckTokenMembership
ConvertStringSidToSidW
RegQueryValueExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash

kernel32

LocalFree
GetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
CreateEventW
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
SetEvent
PostQueuedCompletionStatus
CreateThread
MultiByteToWideChar
LocalAlloc
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
RaiseException
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateIoCompletionPort
GetQueuedCompletionStatus
DeviceIoControl
GetVolumePathNameW
CreateFileW
GetFullPathNameW
DuplicateHandle
OpenProcess
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCommandLineA
GetVersionExA
RtlUnwind
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

ole32

CoRegisterClassObject
StringFromGUID2
CoRevokeClassObject
CoUninitialize
CoInitializeEx
CoImpersonateClient
CoRevertToSelf
CoInitializeSecurity

oleaut32

SysAllocStringLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocString

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e1c8cc9a299f7557474701f48838350a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

Sections

.text Size: 77KB - Virtual size: 77KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 70KB - Virtual size: 72KB

.text
Size: 77KB - Virtual size: 77KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 70KB - Virtual size: 72KB