a27087b917455a4017c08043fff0d040e1a1a3deb1cd5e633ad14207d99b97c2

Sharing

Copy URL Twitter E-mail

General

Target

a27087b917455a4017c08043fff0d040e1a1a3deb1cd5e633ad14207d99b97c2
Size

46KB
MD5

0d48f0fcd7520c98d579c1c7f7650fb0
SHA1

d1579bad79e47c94dc5221b29f861ca8ba066363
SHA256

a27087b917455a4017c08043fff0d040e1a1a3deb1cd5e633ad14207d99b97c2
SHA512

e264f194288740a187b7094ddfb6b326359c8e82953f639895d5080256eebe391ee177ecdf187bae62bb0ec0449ff58a69c491208e66247a39831d2e9b076cf1
SSDEEP

768:zghF6FQ6blZtqFPmy7uSai4pD8klOR0/PLjPWBsi58kLdxdhAfoayYiw:8hF699KPmCuhiGD7lOG3N+8kLjdhcZ3

Score

N/A

Malware Config

Signatures

Files

a27087b917455a4017c08043fff0d040e1a1a3deb1cd5e633ad14207d99b97c2
.exe windows x86

bedf59ad30411f4db51321e0f17b87d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCloseKey
RegConnectRegistryA
RegEnumValueA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
QueryServiceStatus
StartServiceA
ControlService

kernel32

LocalFree
FormatMessageA
SetThreadUILanguage
RegisterApplicationRestart
GetCommandLineW
HeapSetInformation
GetLastError
Sleep
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange

mfc42

ord823
ord825
ord800
ord1772
ord540
ord4160

msvcrt

memmove
_stricmp
_vsnprintf
__getmainargs
_cexit
_exit
_XcptFilter
exit
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_controlfp
_lseek
_open
_read
_close
__CxxFrameHandler3
??_U@YAPAXI@Z
atoi
strchr
??_V@YAXPAX@Z
setlocale
printf
_iob
fflush
_purecall

user32

CharToOemA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hmbrffo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bedf59ad30411f4db51321e0f17b87d7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

mfc42

msvcrt

user32

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 28KB - Virtual size: 29KB

hmbrffo Size: - Virtual size: 4KB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 28KB - Virtual size: 29KB

hmbrffo
Size: - Virtual size: 4KB