8a513d4008656b73382723ec4af3da533b4712b47522477670a684c603391791

Sharing

Copy URL Twitter E-mail

General

Target

8a513d4008656b73382723ec4af3da533b4712b47522477670a684c603391791
Size

61KB
MD5

08f0100cf323aef81ed7e2951f5bdf18
SHA1

36009425e8e83a9a2393bd529ea8a7445f4519fe
SHA256

8a513d4008656b73382723ec4af3da533b4712b47522477670a684c603391791
SHA512

d4b6b969ba62544c6280ca958714a2f65ca89fe5a0f960226ba9baa06c53e49ae30626d4a085d688253ae13c37c2ce824259cc5993d1e06b6ab5876073f3f083
SSDEEP

1536:2rjllA8Xpwu8m2HOtnxhAUO9XJ2YqjaS8MCr/rZZTU+H/k:2rjXA8Xqpm2Hoxh69XJTq2AsNZQ

Score

N/A

Malware Config

Signatures

Files

8a513d4008656b73382723ec4af3da533b4712b47522477670a684c603391791
.exe windows x86

cd4f9a244dd2c7a42816d083709c844d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
InitializeSecurityDescriptor
CopySid
GetLengthSid
IsValidSid
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
GetTokenInformation
LookupAccountNameW
AddAce
GetAce
GetAclInformation
AddAccessAllowedAce
InitializeAcl
RegEnumKeyExW
SetSecurityDescriptorDacl
OpenProcessToken
OpenThreadToken
FreeSid
LookupAccountSidW
AllocateAndInitializeSid
RegQueryValueExW
RegOpenCurrentUser

kernel32

VirtualAlloc
GetSystemInfo
VirtualQuery
MultiByteToWideChar
lstrlenW
lstrcpyW
VirtualProtect
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
HeapDestroy
SetEvent
CreateThread
CreateEventW
LeaveCriticalSection
EnterCriticalSection
lstrcpynW
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
GetCurrentThread
lstrcatW
lstrlenA
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
LocalFree
Sleep
GetCurrentThreadId
LocalAlloc
HeapSetInformation
GetCommandLineW
SetLastError
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
GetVersionExW
WaitForSingleObject
CloseHandle
GetLastError
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
ProcessIdToSessionId
GetExitCodeThread
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA

user32

CharNextW
CharPrevW
DispatchMessageW
GetMessageW
PostThreadMessageW
UpdatePerUserSystemParameters

msvcrt

_except_handler4_common
??1type_info@@UAE@XZ
_unlock
__dllonexit
_lock
_onexit
_controlfp
_vsnwprintf
memset
malloc
free
realloc
memcpy
__CxxFrameHandler3
_purecall
_CxxThrowException
_vsnprintf
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_callnewh
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
?terminate@@YAXXZ

ole32

CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject

oleaut32

SysAllocString
LoadTypeLi
RegisterTypeLi
SysStringLen
VarUI4FromStr
LoadRegTypeLi
SysFreeString

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd4f9a244dd2c7a42816d083709c844d

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

oleaut32

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 22KB - Virtual size: 22KB