c4f5e4da21a3062029b6e244ac242c67ddb0e903ede4e8656ce45485b6a0c592

Sharing

Copy URL Twitter E-mail

General

Target

c4f5e4da21a3062029b6e244ac242c67ddb0e903ede4e8656ce45485b6a0c592
Size

201KB
MD5

1241bd9d1b59791086898225055d3db0
SHA1

78fe3c3dbb5091211b08e936220bf2b35bae4d32
SHA256

c4f5e4da21a3062029b6e244ac242c67ddb0e903ede4e8656ce45485b6a0c592
SHA512

cdf11f3f8b6df032f2e1198f8189b87d47f52e13560cd4785dae0d3338a388e52a056c38b8630e4245b7c8c49930c46ff7b7a33ec90fbecfaf97b1075a694df8
SSDEEP

3072:+5+RDxXVNULR3w1Ur2qZrYKXeMOftffjmNQDF:+gfNkoUr2gOM2VfjmNyF

Score

N/A

Malware Config

Signatures

Files

c4f5e4da21a3062029b6e244ac242c67ddb0e903ede4e8656ce45485b6a0c592
.exe windows x86

acc28c5e82f3376c1657e1b305d893f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_controlfp
__dllonexit
_onexit
??2@YAPAXI@Z
_XcptFilter
?terminate@@YAXXZ
__CxxFrameHandler
_exit
_CxxThrowException

advapi32

SetSecurityDescriptorGroup
OpenProcessToken
GetLengthSid
DeregisterEventSource
ReportEventA
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
IsValidSid
GetAclInformation
AddAce
InitializeAcl
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegisterEventSourceA
GetTokenInformation
SetSecurityDescriptorOwner
AddAccessAllowedAce
CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
GetAce
RegCloseKey
RegOpenKeyExA

kernel32

ReadFile
WriteFile
GetStartupInfoA
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
DuplicateHandle
CloseHandle
WaitForSingleObject
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetLastError
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
OpenProcess
CreateFileMappingA
GetCurrentProcess
lstrcpyA
UnmapViewOfFile
WideCharToMultiByte
GetVersionExA
CreatePipe
MapViewOfFile
GetOverlappedResult
CreateFileA
DeviceIoControl
WaitForMultipleObjects
CreateMutexA
TerminateThread
CreateThread
ResetEvent
ReleaseMutex
LocalAlloc
GetThreadLocale
SetThreadLocale
FormatMessageA
LocalFree
lstrlenA
lstrlenW
lstrcmpiA
GetACP
MultiByteToWideChar
ExpandEnvironmentStringsA

user32

MessageBoxA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

acc28c5e82f3376c1657e1b305d893f5

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

Sections

.text Size: 77KB - Virtual size: 76KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 77KB - Virtual size: 76KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 7KB