bc113f5c5ee9f4972a62d8714a35df87a6f69000f2748d1fbb898ded2d86fcbc

Sharing

Copy URL Twitter E-mail

General

Target

bc113f5c5ee9f4972a62d8714a35df87a6f69000f2748d1fbb898ded2d86fcbc
Size

112KB
MD5

c2779d98323b5fbbc58ac169f1fe4069
SHA1

b09cd9432bcdc545d943f0a6a460db20796b4f19
SHA256

bc113f5c5ee9f4972a62d8714a35df87a6f69000f2748d1fbb898ded2d86fcbc
SHA512

3f904cb871899604feb91a74c129f4fc4aa44e5d8eaf7fa5b3dbbdf6239d75a38efb42dc28f2d4475d8f22a01698cbfcfe267c0034323fec337c1976f914999c
SSDEEP

3072:L6Nm2ZsCqjPbgyrNdKuxZo/Y2rql0EjOk:L6U2SCKDnNv2rq6Ep

Score

N/A

Malware Config

Signatures

Files

bc113f5c5ee9f4972a62d8714a35df87a6f69000f2748d1fbb898ded2d86fcbc
.dll windows x86

239d429576897625b67d0cbb146b57de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegFlushKey
RegEnumValueA
ChangeServiceConfigA
RegQueryInfoKeyW
LookupPrivilegeValueA
RegOpenKeyW
RegEnumKeyExW
GetTokenInformation
RegCreateKeyExA
RegDeleteValueA
LookupAccountSidW
RegQueryValueExW
EqualSid
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
GetSecurityDescriptorControl
AllocateAndInitializeSid

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
VerQueryValueA
VerQueryValueW

kernel32

RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleHandleA
IsValidLocale
GetProcAddress
GetHandleInformation
LoadLibraryA
VirtualAlloc
lstrcpynW
SetStdHandle
CopyFileW
GetVersion
SystemTimeToFileTime
FileTimeToLocalFileTime
GetProcessHeap
CreateProcessA
ReadFile
CopyFileA
GetCurrentDirectoryW
LocalAlloc
GetVersionExA
SetPriorityClass
GetTimeFormatA
GetACP
GetModuleHandleW
GetLastError
SetThreadPriority
DeleteCriticalSection
HeapSize
IsValidCodePage
FormatMessageA
ExitProcess
GetSystemTime
HeapAlloc
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
CloseHandle
CreateFileA
UnhandledExceptionFilter
GetCPInfo
GetOEMCP
FlushFileBuffers
SetEndOfFile
SetFilePointer

Exports

Exports

Jenwmba

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

239d429576897625b67d0cbb146b57de

Headers

File Characteristics

Imports

advapi32

version

kernel32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 52KB - Virtual size: 54KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 52KB - Virtual size: 54KB

.reloc
Size: 8KB - Virtual size: 4KB