195996fb424ba47e2e1a3019c1d28f59eed56db3cd54291cfa8bec6434d7b8c9

Sharing

Copy URL

Twitter E-mail

General

Target

195996fb424ba47e2e1a3019c1d28f59eed56db3cd54291cfa8bec6434d7b8c9
Size

317KB
MD5

c995a71d5f32d24498aacf7b6774c280
SHA1

b50578c8b5ac8ce11b6b7494bcc9517b40cc2f91
SHA256

195996fb424ba47e2e1a3019c1d28f59eed56db3cd54291cfa8bec6434d7b8c9
SHA512

58bcc79d8ee85ec0634352762a94cb67a8481b6cc8503c88d4349f4f10eded8ed7177043dcf8dc6623644a42f49aa7da46eb49de1106904550ddb2613c10e323
SSDEEP

6144:5dGSbnSfTVtOq6qb+ATXLFNOPp7XHENoGaPmR:5dGSb4J6qbRX/O2R

Score

N/A

Malware Config

Signatures

Files

195996fb424ba47e2e1a3019c1d28f59eed56db3cd54291cfa8bec6434d7b8c9
.dll windows x86

6365ead34bb9578678c53a84ebc0b853

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalFree
MapViewOfFile
MoveFileExW
GetCurrentThreadId
OpenProcess
QueryPerformanceCounter
ReadFile
GetProcAddress
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetFileType
GetFileSize
GetFileAttributesW
GetEnvironmentStringsW
ReadProcessMemory
GetEnvironmentStrings
FormatMessageW
FlushFileBuffers
ExitProcess
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateFileW
CreateFileMappingW
CompareStringW
CompareStringA
CloseHandle
VirtualAllocEx
MultiByteToWideChar
CreateFileA

user32

ReleaseDC
KillTimer
PostQuitMessage
DefWindowProcA
LoadIconW
GetDC

gdi32

DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
Rectangle
CreateHatchBrush
SetBkColor
Ellipse
DeleteDC
BitBlt
GetDeviceCaps

advapi32

OpenServiceW
OpenSCManagerW
OpenProcessToken
LookupPrivilegeValueW
FreeSid
EnumServicesStatusExW
DeleteService
CloseServiceHandle
CheckTokenMembership
AllocateAndInitializeSid
AdjustTokenPrivileges
RegOpenKeyExA
QueryServiceStatusEx
RegCloseKey
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
QueryServiceConfigW

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ggg
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6365ead34bb9578678c53a84ebc0b853

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.rdata Size: 1KB - Virtual size: 1KB

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 281KB - Virtual size: 281KB

ggg Size: 11KB - Virtual size: 10KB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 281KB - Virtual size: 281KB

ggg
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 2KB - Virtual size: 1KB