ad4684721180c8b3cf72b230982b855e8d325805c08501f9f990830628423610

General

Target

ad4684721180c8b3cf72b230982b855e8d325805c08501f9f990830628423610
Size

256KB
MD5

065a99dcc0bb2c1e3a4e85ba68019730
SHA1

12d6b0ea919d1e36bd2b5e97318294e9862aaf04
SHA256

ad4684721180c8b3cf72b230982b855e8d325805c08501f9f990830628423610
SHA512

670354cee66b594107cffdb0327ed4211b61d775f2a4b3880fa66d8105667aee442ae4f3e019bd52c3fa0efc205bf0e8082be37bfa6b2e50617efe632bda7362
SSDEEP

6144:cCf0bCNnJk9LAzJxJwf5PpZ92tGCEIIPpZx:cCfbnaLGIVnCEx

Score

N/A

Malware Config

Signatures

Files

ad4684721180c8b3cf72b230982b855e8d325805c08501f9f990830628423610
.dll windows x86

99a262539b61a31e0e20dc59384fd685

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CreateServiceA
OpenSCManagerA
StartServiceA
OpenServiceA
CloseServiceHandle
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
FreeSid
CheckTokenMembership
AllocateAndInitializeSid

msvcrt

_adjust_fdiv
_initterm
free
strrchr
fopen
fwrite
fclose
strstr
__CxxFrameHandler
_access
??2@YAPAXI@Z
??3@YAXPAX@Z
srand
rand
sprintf
malloc
_strlwr

kernel32

DisableThreadLibraryCalls
CreateThread
GetCurrentProcess
IsWow64Process
GetWindowsDirectoryA
MoveFileA
LoadLibraryA
GetProcAddress
Sleep
FindResourceA
SizeofResource
LoadResource
LockResource
SetFileAttributesA
DeleteFileA
FreeResource
CreateFileA
WriteFile
GetLastError
GetModuleFileNameA
CloseHandle
MoveFileExA
GetTempPathA
GetTickCount

Exports

Exports

CompareLinkInfoReferents
CompareLinkInfoVolumes
CreateLinkInfo
CreateLinkInfoA
CreateLinkInfoW
DestroyLinkInfo
DisconnectLinkInfo
GetCanonicalPathInfo
GetCanonicalPathInfoA
GetCanonicalPathInfoW
GetLinkInfoData
IsValidLinkInfo
ResolveLinkInfo
ResolveLinkInfoA
ResolveLinkInfoW

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99a262539b61a31e0e20dc59384fd685

Headers

File Characteristics

Imports

advapi32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 668B

.rsrc Size: 220KB - Virtual size: 218KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 668B

.rsrc
Size: 220KB - Virtual size: 218KB

.reloc
Size: 4KB - Virtual size: 1KB