d370f80f0a89c918827c44dd507d4578a0a2cf9d8f5a3fb4fa499ba86db77e84

Sharing

Copy URL Twitter E-mail

General

Target

d370f80f0a89c918827c44dd507d4578a0a2cf9d8f5a3fb4fa499ba86db77e84
Size

98KB
MD5

a2110c58cf51ba7fca490b1b805746e0
SHA1

f2150cc7e65252b0d6fdbef2ef8781f65cff2451
SHA256

d370f80f0a89c918827c44dd507d4578a0a2cf9d8f5a3fb4fa499ba86db77e84
SHA512

d594bb077fe1cd1a56f5907fe0406ac953a4a49d8814fd2273444158a9824e960478decbf27d1e56e6df0992dbb6363ae33c3086c1b911e9b43bac6a1145e5a4
SSDEEP

1536:cXaxEDAG8pugF2BC64+zoVPVwjkDbYzdwQ0q1IzmlSZ51:cqODX8Ep4pVPyj5wQJ1IzmlS9

Score

N/A

Malware Config

Signatures

Files

d370f80f0a89c918827c44dd507d4578a0a2cf9d8f5a3fb4fa499ba86db77e84
.exe windows x86

27de2481a002903bf758833d84e47f38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
QueryServiceStatus
StartServiceW
OpenServiceW
OpenSCManagerW
CreateWellKnownSid
CloseServiceHandle

kernel32

InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
CloseHandle
WaitForSingleObject
Sleep
CreateThread
CreateEventW
GetCurrentThreadId
SetEvent
GetCommandLineW
LocalAlloc
LocalFree
InterlockedCompareExchange
lstrcmpiW
GetVersionExA
WideCharToMultiByte
GetStartupInfoW
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
GetLastError
GetProcAddress
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
OutputDebugStringA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapSize
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
VirtualAlloc

user32

CharUpperW
PostThreadMessageW
GetMessageW
UnregisterClassA
DispatchMessageW
TranslateMessage
CharNextW

ntdll

RtlUnwind

oleaut32

RegisterTypeLi
SysFreeString
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi

ole32

CoTaskMemFree
CoInitializeEx
CoUninitialize
CoSuspendClassObjects
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoResumeClassObjects

rpcrt4

RpcStringFreeW
RpcBindingFree
RpcBindingFromStringBindingW
NdrClientCall2
I_RpcExceptionFilter
RpcStringBindingComposeW
RpcBindingSetAuthInfoExW

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

27de2481a002903bf758833d84e47f38

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

ntdll

oleaut32

ole32

rpcrt4

Sections

.text Size: 66KB - Virtual size: 65KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 23KB - Virtual size: 26KB

.text
Size: 66KB - Virtual size: 65KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 23KB - Virtual size: 26KB