7b6217a2e16fca88f49083ebbbd5030a235696fff8798f4beba6ff660b0124a1

Sharing

Copy URL Twitter E-mail

General

Target

7b6217a2e16fca88f49083ebbbd5030a235696fff8798f4beba6ff660b0124a1
Size

180KB
MD5

c8f125e7b45390fd181177f2f5238db4
SHA1

7d21e4a5f17c51632b29138004f098b4e1ae435f
SHA256

7b6217a2e16fca88f49083ebbbd5030a235696fff8798f4beba6ff660b0124a1
SHA512

1591e2ac8e34084e9ed9bdac6b9fef7727449b52676a1b89d2702e9c56191d5de12124754bbdb414a82744b52d144eb074f24ae8d97c3a6a36d90fecde93caab
SSDEEP

1536:Q8RADG0YFL1NwEJYSpFTgs4nLuQMiq+p55y8xrpWFnpM4CgOi4CGIl0FI8H/7BS3:QrG1rJhtgvLuQMGNupUgSCGc0Wizigc

Score

N/A

Malware Config

Signatures

Files

7b6217a2e16fca88f49083ebbbd5030a235696fff8798f4beba6ff660b0124a1
.dll windows x86

d6df7a28557624ba83f9e97fad862cb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
SetCriticalSectionSpinCount
VirtualAlloc
MapViewOfFileEx
PostQueuedCompletionStatus
SetLastError
WaitForSingleObject
SetThreadPriorityBoost
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnmapViewOfFile
LoadLibraryA
LocalAlloc
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
CancelIo
GetOverlappedResult
GlobalFree
WaitForSingleObjectEx
lstrcatA
FileTimeToSystemTime
GetComputerNameA
TransactNamedPipe
SetNamedPipeHandleState
WaitNamedPipeW
FlushFileBuffers
lstrcmpiA
ConnectNamedPipe
CreateNamedPipeW
GetQueuedCompletionStatus
CreateIoCompletionPort
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetSystemDirectoryW
lstrlenW
VirtualProtect
GetSystemInfo
TlsSetValue
TlsAlloc
TlsGetValue
VirtualFree
IsBadWritePtr
WideCharToMultiByte
GetModuleFileNameA
GetComputerNameExW
GetSystemTimeAsFileTime
lstrcpyA
lstrcmpW
InterlockedExchangeAdd
LocalFree
GlobalMemoryStatusEx
QueueUserAPC
DuplicateHandle
CreateThread
SetUnhandledExceptionFilter
RaiseException
CreateEventW
HeapAlloc
HeapFree
GetCommandLineW
CreateFileW
WriteFile
GetCurrentProcessId
ResetEvent
CompareStringW
InterlockedExchange
GetCurrentThreadId
Sleep
lstrlenA
InterlockedCompareExchange
SetEvent
InterlockedDecrement
InterlockedIncrement
FormatMessageW
FormatMessageA
GetCurrentThread
GetCurrentProcess
CloseHandle
GetTickCount
GetComputerNameW
GetLastError
LoadLibraryW
GetProcAddress
FreeLibrary
GetProcessHeap
DisconnectNamedPipe
HeapReAlloc
GetStartupInfoA
GetCurrentDirectoryA
SetHandleInformation
ExitThread

advapi32

OpenProcessToken
RevertToSelf
OpenThreadToken
LookupAccountSidW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegOpenKeyExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegQueryInfoKeyA
RegEnumValueA
RegEnumValueW
MakeSelfRelativeSD
GetSecurityDescriptorLength
GetSecurityDescriptorControl
IsValidSecurityDescriptor
CredIsMarshaledCredentialW
CredUnmarshalCredentialW
CopySid
GetLengthSid
LookupAccountNameW
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
EqualSid
IsValidSid
CloseServiceHandle
StartServiceW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegOpenKeyW
ImpersonateNamedPipeClient
GetTokenInformation
SetThreadToken

msvcrt

toupper

secur32

GetUserNameExW

Exports

Exports

AssignToBeing
AuthenticatedServerOrBeOr
CALsThe
DeviceYour
InstancesCALs

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6df7a28557624ba83f9e97fad862cb4

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

secur32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 48KB - Virtual size: 111KB

.rsrc Size: 68KB - Virtual size: 64KB

.reloc Size: 4KB - Virtual size: 812B

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 48KB - Virtual size: 111KB

.rsrc
Size: 68KB - Virtual size: 64KB

.reloc
Size: 4KB - Virtual size: 812B