33253bd0aff62a51864dffc806a110449bc22ee5f7605292bd7de22f161f9886

Sharing

Copy URL Twitter E-mail

General

Target

33253bd0aff62a51864dffc806a110449bc22ee5f7605292bd7de22f161f9886
Size

230KB
MD5

43bd578a03f47e070d58584576809eed
SHA1

08d4eaffbdaa1d344d9cb69ae7810bdd5f4e5221
SHA256

33253bd0aff62a51864dffc806a110449bc22ee5f7605292bd7de22f161f9886
SHA512

6f94c0f8e5b5392929a5c4abbd5d0868d1f8617baba8156a74347b136b9ba2e5b2695cb1f1ca6c6371777d9907356e11b2bcd056c2d9b1b6538aae50ead726c4
SSDEEP

3072:UIEKHXcBP59YWzmgTGRkrbiyz8V8+WB4O2mmEAX99juvJjvlB3anL2yT:rDXcp59hcRKgV8+C2XEQ99Cx3k

Score

N/A

Malware Config

Signatures

Files

33253bd0aff62a51864dffc806a110449bc22ee5f7605292bd7de22f161f9886
.exe windows x86

7b340e002025085033fc18a93307f99f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

sporder

WSCWriteProviderOrder

ws2_32

WSAStartup
WSACleanup
WSAEnumNameSpaceProvidersA
WSCUnInstallNameSpace
WSCEnableNSProvider
WSCInstallNameSpace
WSCGetProviderPath
WSCDeinstallProvider
WSCInstallProvider
WSCEnumProtocols

shlwapi

StrStrIA
SHDeleteKeyA

kernel32

GetFileAttributesA
GetWindowsDirectoryA
FreeLibrary
CloseHandle
TerminateProcess
OpenProcess
GetProcAddress
LoadLibraryA
SetCurrentDirectoryA
GetSystemDirectoryA
GetCurrentDirectoryA
FindClose
FindFirstFileA
FindFirstFileW
SetCurrentDirectoryW
InterlockedDecrement
GetVersionExA
GetModuleFileNameA
GetModuleHandleA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
RemoveDirectoryA
SetFileAttributesA
DeleteFileA
Sleep
GetLastError
CreateFileA
GetACP
GetOEMCP
SetEnvironmentVariableA
SetEndOfFile
GetLocaleInfoW
LocalFree
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
ExitProcess
GetCurrentProcess
GetTimeZoneInformation
GetCommandLineA
GetVersion
HeapAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
HeapSize
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
WriteFile
FlushFileBuffers
SetUnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW

user32

MessageBoxA

advapi32

RegQueryValueExA
RegQueryInfoKeyA
RegEnumValueA
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

oleaut32

SysFreeString
VariantClear
SysAllocString

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7b340e002025085033fc18a93307f99f

Headers

File Characteristics

Imports

sporder

ws2_32

shlwapi

kernel32

user32

advapi32

oleaut32

Sections

.text Size: 168KB - Virtual size: 167KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 20KB - Virtual size: 25KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 168KB - Virtual size: 167KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 20KB - Virtual size: 25KB

.rsrc
Size: 10KB - Virtual size: 10KB