8afb990d35afe4f43729551563ad4695eccf34bfbfa4bcca9e22214e8693ed66

Sharing

Copy URL Twitter E-mail

General

Target

8afb990d35afe4f43729551563ad4695eccf34bfbfa4bcca9e22214e8693ed66
Size

124KB
MD5

14c74e76475b8222c34910b5618a3b20
SHA1

af9475588503ac0a57ec224080b2ac873e3278b2
SHA256

8afb990d35afe4f43729551563ad4695eccf34bfbfa4bcca9e22214e8693ed66
SHA512

8f18412cedbde59171e8c7b6d52cf021016742fe4bbf5709b28422cb1058c00dd435cc1be1986a839e47e6449c0d8c03808a07b10703ae09f51162fc1ddb145a
SSDEEP

3072:jUgjZgchV57oNtbaQlFu5ldbpqcXYTKi3D:jUVOVtQlox1qcXqK

Score

N/A

Malware Config

Signatures

Files

8afb990d35afe4f43729551563ad4695eccf34bfbfa4bcca9e22214e8693ed66
.dll windows x86

bf5f469a5863732f6980086e568e29b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
LockServiceDatabase
LookupAccountSidW
RegDeleteKeyW
RegEnumValueW
GetSecurityDescriptorControl
RegSetValueExW
RegCloseKey
EqualSid
RegFlushKey
RegQueryValueW

version

VerQueryValueA
GetFileVersionInfoW

kernel32

RtlUnwind
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
InterlockedDecrement
GetCPInfo
GetSystemTimeAsFileTime
HeapAlloc
SetThreadPriority
lstrcmpiW
GetCurrentDirectoryW
CreateFileA
GetLastError
GetVersion
SetHandleCount
WaitForSingleObject
GetFileSize
SearchPathA
ExpandEnvironmentStringsA
SetLastError
LocalAlloc
LoadLibraryW
LoadResource
FormatMessageA
ReleaseMutex
ResumeThread
ExitThread
LoadLibraryExW
FreeLibrary
GetTempFileNameA
GetTempPathA
GetLocaleInfoW
DeleteCriticalSection
VirtualFree
CreateFileW
lstrcpyW
SetPriorityClass
CreateFileMappingW
SetEnvironmentVariableA
GetVersionExA
SuspendThread
LocalFree
ReadFile
CreateThread
SetFilePointer
GetACP
GlobalAlloc
lstrlenA
IsValidLocale
GetCurrentProcessId
GetTempPathW
CreateProcessW
CopyFileW
SetCurrentDirectoryW
IsBadStringPtrW
CreateProcessA
InterlockedExchange
CreateEventA
lstrcatA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetHandleInformation
VirtualAlloc
ExitProcess
GetSystemTime
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapCreate
HeapFree
FatalAppExitA
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetCurrentThread
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
CloseHandle
UnhandledExceptionFilter
GetOEMCP
FlushFileBuffers
SetStdHandle
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW

Exports

Exports

LARL

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf5f469a5863732f6980086e568e29b8

Headers

File Characteristics

Imports

advapi32

version

kernel32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 52KB - Virtual size: 55KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 52KB - Virtual size: 55KB

.reloc
Size: 8KB - Virtual size: 6KB