3a7ed62411689d64bab6aacc39a8cf6628ce62e31105395f1bce3dce59d75971

Sharing

Copy URL

Twitter E-mail

General

Target

3a7ed62411689d64bab6aacc39a8cf6628ce62e31105395f1bce3dce59d75971
Size

60KB
MD5

09ed996d289c80e6751e1072bf957640
SHA1

9c340fb421273170c605df3e257298b37225a1a7
SHA256

3a7ed62411689d64bab6aacc39a8cf6628ce62e31105395f1bce3dce59d75971
SHA512

b242c6b8ffe237baa6833af77f3fab0dce13dd6eab73361f41b56ec3b0c2805f8e5b16f38e66311f48ed0d55a6de16fb4970880b194ff200513374c8a0d29e6b
SSDEEP

1536:IofqF5sUAXAFFMKdxq6K/WRPwKFYPkkan24H:I/F/q6KuRPwKFYc

Score

N/A

Malware Config

Signatures

Files

3a7ed62411689d64bab6aacc39a8cf6628ce62e31105395f1bce3dce59d75971
.exe windows x86

da87d5669cfc3a4171c5f6cc62f475de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
FreeSid
CloseServiceHandle
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
SetFileSecurityW
SetSecurityDescriptorDacl
AddAccessAllowedAceEx
InitializeAcl
InitializeSecurityDescriptor
GetLengthSid
AllocateAndInitializeSid
RegOpenKeyExW
RegSetValueExW
GetFileSecurityW
OpenServiceW
OpenSCManagerW
QueryServiceStatus
ControlService
QueryServiceStatusEx
QueryServiceConfigW
EnumDependentServicesW
StartServiceW
RegCreateKeyExW
RegSetKeySecurity
SetSecurityDescriptorControl
SetEntriesInAclW
GetSecurityDescriptorDacl
RegGetKeySecurity
RegEnumKeyExW
RegSaveKeyW
RegRestoreKeyW
RegDeleteValueW

kernel32

GetStdHandle
BackupRead
CreateFileW
BackupWrite
ReadFile
CopyFileW
GetFileAttributesW
MultiByteToWideChar
GetCurrentProcess
GetVersionExW
FormatMessageW
GetLastError
ExpandEnvironmentStringsW
GetSystemDirectoryW
CompareStringW
Sleep
WaitForSingleObject
OpenProcess
GetDiskFreeSpaceExW
CreateDirectoryW
LoadLibraryW
GetProcAddress
GetModuleHandleW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
GetFullPathNameW
HeapSetInformation
WriteConsoleW
LocalAlloc
WriteFile
GetFileType
LocalFree
CloseHandle
FreeLibrary
GetSystemTimeAsFileTime
SetThreadUILanguage
GetThreadLocale
SetThreadLocale
WideCharToMultiByte
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange

msvcrt

__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_except_handler4_common
_controlfp
_exit
_cexit
__wgetmainargs
malloc
_callnewh
__p__commode
free
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
__setusermatherr
_amsg_exit
_initterm
??0exception@@QAE@XZ
towlower
wcsrchr
_wcsicmp
wcschr
_snwscanf_s
wscanf
exit
wcsstr
_vsnwprintf
memset
__CxxFrameHandler3
_CxxThrowException
_XcptFilter

user32

CharNextW
LoadStringW

clusapi

ClusterResourceCloseEnum
CloseClusterResource
OpenClusterResource
OpenCluster
ClusterResourceControl
OfflineClusterResource
GetClusterResourceState
OnlineClusterResource
ClusterResourceEnum
CloseCluster
ClusterResourceOpenEnum

ntdll

RtlCreateServiceSid
RtlInitUnicodeString

mqutil

MQGetResourceHandle

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

da87d5669cfc3a4171c5f6cc62f475de

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

clusapi

ntdll

mqutil

Sections

.text Size: 37KB - Virtual size: 37KB

.data Size: 512B - Virtual size: 1008B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 19KB - Virtual size: 22KB

.text
Size: 37KB - Virtual size: 37KB

.data
Size: 512B - Virtual size: 1008B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 19KB - Virtual size: 22KB