c19aa1beca91541602b13ab482d4103afa45b0275c2bf5b133f726667330f597

Sharing

Copy URL

Twitter E-mail

General

Target

c19aa1beca91541602b13ab482d4103afa45b0275c2bf5b133f726667330f597
Size

286KB
MD5

8381a2af48ad5a118306928f719a7860
SHA1

e00a23a46f51170602723255fefb99a3f8759ee8
SHA256

c19aa1beca91541602b13ab482d4103afa45b0275c2bf5b133f726667330f597
SHA512

3562e0ce4ff58b1e3d266fb50aaf5f48f5deccdb917da3aac1d451e2df03c96e22957e81c1ffdbee65d136512e0d8c43d3a5b535b539cbd1b028207b931ac498
SSDEEP

6144:xmYewup0v7/fYEb+FXflCxXfZ69NNxwL3fCVAOuD:xjY8TfTu9CxXReNxwL3a+OS

Score

N/A

Malware Config

Signatures

Files

c19aa1beca91541602b13ab482d4103afa45b0275c2bf5b133f726667330f597
.exe windows x86

af8006f3a7ab195f60a5b982d431b865

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetVolumeInformationW
GetWindowsDirectoryW
LoadLibraryExW
LoadLibraryW
LoadLibraryA
FindResourceExW
LoadLibraryExA
GetLastError
WideCharToMultiByte
WaitForSingleObject
Sleep
DeleteFileW
FindResourceW
LoadResource
LockResource
GetProcAddress
SizeofResource
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
GetStringTypeW
HeapReAlloc
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle
GetProcessHeap

advapi32

ChangeServiceConfig2W
OpenServiceW
OpenSCManagerW
CreateServiceW

Sections

.text
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af8006f3a7ab195f60a5b982d431b865

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 201KB - Virtual size: 200KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 5KB - Virtual size: 13KB

.reloc Size: 21KB - Virtual size: 20KB

.text
Size: 201KB - Virtual size: 200KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 5KB - Virtual size: 13KB

.reloc
Size: 21KB - Virtual size: 20KB