f191a1d7276a5a9ff90b222e63adb19d4081b601e6a575885a9afcb246b90628

Sharing

Copy URL

Twitter E-mail

General

Target

f191a1d7276a5a9ff90b222e63adb19d4081b601e6a575885a9afcb246b90628
Size

292KB
MD5

ebda4501e8b0ecc3b981de7fa572fb64
SHA1

7618a02766d016f17cc2c70bcfa71b426a35bcf3
SHA256

f191a1d7276a5a9ff90b222e63adb19d4081b601e6a575885a9afcb246b90628
SHA512

74af806de611c01fb7a8d689f1a89adc1ce899ea25c359d024db60398ab9db2cff3818434c352a9e695f390eef805e23ca70f8b20a3561f8cec2cc6d26d425cc
SSDEEP

6144:UhHnkDP4+FTp0uduFXl+lArT8vQbOPfGu:UhHWpBColBQbOPfGu

Score

N/A

Malware Config

Signatures

Files

f191a1d7276a5a9ff90b222e63adb19d4081b601e6a575885a9afcb246b90628
.exe windows x86

50b0e15ae8668433d3d3c079b20f3e7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DeleteService
CloseServiceHandle
ControlService
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegQueryValueExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
ChangeServiceConfigA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

kernel32

CloseHandle
CreateThread
CreateSemaphoreA
WriteConsoleOutputCharacterW
SetThreadPriority
EndUpdateResourceA
GetSystemPowerStatus
BindIoCompletionCallback
CancelDeviceWakeupRequest
UnlockFile
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
InterlockedIncrement
InterlockedDecrement
GetCommandLineA
GetVersionExA
GetStartupInfoA
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
GetCurrentThreadId
GetCPInfo
GetACP
GetOEMCP
HeapFree
HeapAlloc
WideCharToMultiByte
GetTimeZoneInformation
GetModuleHandleA
ExitProcess
DeleteCriticalSection
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
RtlUnwind
Sleep
LCMapStringA
LCMapStringW
VirtualAlloc
HeapReAlloc
GetLocaleInfoW
LoadLibraryExA
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
VirtualProtect
GetSystemInfo
VirtualQuery
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50b0e15ae8668433d3d3c079b20f3e7c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 59KB - Virtual size: 58KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 70KB - Virtual size: 81KB

.rsrc Size: 148KB - Virtual size: 148KB

.text
Size: 59KB - Virtual size: 58KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 70KB - Virtual size: 81KB

.rsrc
Size: 148KB - Virtual size: 148KB