092d66972ca68e6d0e4538a25e230cee2d6d3881e629a22725e04c9d6e472a1a

Sharing

Copy URL Twitter E-mail

General

Target

092d66972ca68e6d0e4538a25e230cee2d6d3881e629a22725e04c9d6e472a1a
Size

148KB
MD5

845ded2dbd9828c8c9ddfbfa4598f970
SHA1

e344e0480da222861608f8788942d2cfa0ba0c04
SHA256

092d66972ca68e6d0e4538a25e230cee2d6d3881e629a22725e04c9d6e472a1a
SHA512

5e703e1a69277616a8dbd6d82a5f96e72e5e25e2d0fdbb4aaa897583a7d2f6476243ea9777290f4a41139cb68e3c00f397e4b1a6fcfb22f66bdde91d360f31b4
SSDEEP

3072:a/WjCf8TBIclWC7FljNiwmsGcMlNxuK80CCa1Ff:UC5JjNGsgl2K8kS

Score

N/A

Malware Config

Signatures

Files

092d66972ca68e6d0e4538a25e230cee2d6d3881e629a22725e04c9d6e472a1a
.exe windows x86

e2d8439306b164c3285b91f0ce6cfbb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcBindingInqAuthClientW
RpcImpersonateClient
RpcRevertToSelf
RpcBindingVectorFree
RpcEpUnregister
RpcMgmtWaitServerListen
RpcServerListen
RpcServerRegisterAuthInfoW
RpcEpRegisterW
RpcServerInqBindings
RpcServerRegisterIfEx
NdrServerCall2
RpcMgmtStopServerListening
RpcServerUseProtseqW

kernel32

lstrcpyW
CloseHandle
GetFileSize
FlushFileBuffers
WaitForSingleObject
GetExitCodeProcess
CreateEventW
SetEvent
OpenEventW
ResetEvent
GetVersion
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynW
SetErrorMode
CopyFileW
CompareFileTime
GetModuleHandleW
SetFileAttributesW
GetSystemDirectoryW
HeapAlloc
GetProcessHeap
HeapFree
FormatMessageW
Sleep
SetConsoleCtrlHandler
GetCommandLineW
RtlUnwind
LoadLibraryA
GetStartupInfoA
LoadLibraryW
GetProcAddress
FreeLibrary
GetSystemInfo
SuspendThread
ResumeThread
TerminateProcess
GetWindowsDirectoryW
lstrlenW
lstrcatW
CreateFileW
CreateProcessW
GetLocaleInfoA
GetLastError
LocalAlloc
GetCurrentThread
LocalFree
InterlockedExchange
VirtualQuery
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapSize
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
VirtualProtect
GetModuleFileNameW
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
IsBadWritePtr
HeapReAlloc
ExitProcess
GetModuleHandleA
GetCurrentProcess
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc

user32

WaitForInputIdle
wsprintfW

advapi32

AllocateAndInitializeSid
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
OpenServiceW
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerW
CreateServiceW
CloseServiceHandle
SetServiceStatus
RegisterEventSourceW
ReportEventW
DeregisterEventSource
IsValidAcl
IsValidSecurityDescriptor
RegOpenKeyW
RegQueryValueExW
RegCloseKey
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
ImpersonateSelf
OpenThreadToken
AccessCheck
FreeSid
RevertToSelf

shell32

CommandLineToArgvW

ole32

OleUninitialize
OleInitialize

netapi32

NetShareGetInfo
NetApiBufferFree

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�w\NA�
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2d8439306b164c3285b91f0ce6cfbb5

Headers

File Characteristics

Imports

rpcrt4

kernel32

user32

advapi32

shell32

ole32

netapi32

version

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 2KB

�w\NA� Size: 88KB - Virtual size: 88KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 2KB

�w\NA�
Size: 88KB - Virtual size: 88KB