a9c43f302ad9a34e6546632cb8804356eaa1961deb19710407b469fbdeacb012

General

Target

a9c43f302ad9a34e6546632cb8804356eaa1961deb19710407b469fbdeacb012
Size

63KB
MD5

2fa3d402c2bfb7742e0e58c8a97a0f0d
SHA1

cd6fc8e5b749e32641d62e1a064e6bdb06a99201
SHA256

a9c43f302ad9a34e6546632cb8804356eaa1961deb19710407b469fbdeacb012
SHA512

7fb207d68f31b553abfe1d2bca793d672d7fdbe6db8f88c091a83f73be4e47d9ecb84d7c98c0ed16fca601750406065b7ec1fa911a6209f1ac12ba2fb820b562
SSDEEP

768:ZZ1ZDyDFzVHOXkjx7NcTVIOMIQSygAVL2TbDke5LxdGjAhoT/bmyfiA+m0r4RMSE:ZZ0Xdh/O4L2lp035usM18jerQWm40Y

Score

N/A

Malware Config

Signatures

Files

a9c43f302ad9a34e6546632cb8804356eaa1961deb19710407b469fbdeacb012
.exe windows x86

c08a683b282c27e69034329d2ac23974

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
lstrlenA
WriteFile
SizeofResource
CreateFileW
LoadResource
FindResourceW
Process32NextW
lstrcmpiW
CreateThread
CreateToolhelp32Snapshot
GetCurrentProcess
GetFileAttributesW
GetSystemDirectoryW
WinExec
lstrcatW
GetModuleHandleA
ExitProcess
CreateMutexA
GetLastError
ReleaseMutex
CloseHandle
lstrcpyA
DeleteFileW
GetModuleFileNameA
lstrlenW
Sleep
VirtualAllocEx
VirtualProtectEx
GetModuleHandleW
WriteProcessMemory
LoadLibraryW
GetProcAddress
Process32FirstW
VirtualQueryEx

user32

LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
UpdateWindow
GetMessageW
TranslateMessage
DefWindowProcW
FindWindowW
ShowWindow
SendMessageW
DispatchMessageW

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
StartServiceW
ChangeServiceConfigW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegRestoreKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCreateKeyExW
CreateServiceW
DeleteService
RegDeleteValueW

msvcrt

fclose
fopen
strstr
strchr
memset
memcpy
realloc
malloc
strlen
_except_handler3
fseek
??2@YAPAXI@Z
fread
ftell

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c08a683b282c27e69034329d2ac23974

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 7KB

.rsrc Size: 41KB - Virtual size: 44KB

.vmp0 Size: 11KB - Virtual size: 10KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 7KB

.rsrc
Size: 41KB - Virtual size: 44KB

.vmp0
Size: 11KB - Virtual size: 10KB