99c790f377f6d04e40bd0770b4292758df9cedacae389a0618dc2f3e9208cac2

Sharing

Copy URL

Twitter E-mail

General

Target

99c790f377f6d04e40bd0770b4292758df9cedacae389a0618dc2f3e9208cac2
Size

54KB
MD5

3bb9edbed2de26664a785cf525e9c99d
SHA1

777dc5b4e0639321a1196b8e06000a0299603d25
SHA256

99c790f377f6d04e40bd0770b4292758df9cedacae389a0618dc2f3e9208cac2
SHA512

fc78fad7ce1d0f1f1c16fe73d6eee85294458b8e5b368c49b94e3369e6cc51ceed00715ab629b2e74f1b393353c9969e5d6f4102842299874556b002a8e84c10
SSDEEP

768:tPVA2HWDmxy7BvOFnjGx+uJgCR6OxSUNgi9Z/BJTP7K+fZM4gU1S9HKKVBWZl7q:tPGIWuks/uJg0t7TjKuM4LY8KVBM9

Score

N/A

Malware Config

Signatures

Files

99c790f377f6d04e40bd0770b4292758df9cedacae389a0618dc2f3e9208cac2
.dll windows x86

57f6db956546e95150bbe9a7ed2cdcaa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
WriteConsoleW
LocalAlloc
WriteFile
LocalFree
GetStdHandle
GetFileType
GetConsoleMode
LoadLibraryW
GetLastError
GetProcAddress
SetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
Sleep
InterlockedExchange
InterlockedCompareExchange
HeapFree
GetCurrentProcess
GetCurrentDirectoryW
LoadLibraryExA
ResumeThread
SetEvent
UnregisterWait
CreateJobObjectW
AssignProcessToJobObject
SetInformationJobObject
QueueUserWorkItem
TerminateProcess
CloseHandle
WriteProcessMemory
DuplicateHandle
ReadProcessMemory
GetCurrentThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapAlloc
GetProcessHeap
FreeLibrary
GetTickCount
GetCommandLineA
OpenProcess
VirtualProtect

user32

CharToOemW

advapi32

RegQueryValueExW
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegCloseKey
RegOpenKeyExW

rpcrt4

RpcServerRegisterIfEx
RpcServerUseProtseqEpW
RpcServerUnregisterIf
RpcRevertToSelfEx
RpcImpersonateClient

msvcrt

_wtoi
_vsnwprintf
_except_handler3
_initterm
memset
_wcsicmp
_XcptFilter
free
malloc
_adjust_fdiv
__CxxFrameHandler
_unlock

msvcp60

??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57f6db956546e95150bbe9a7ed2cdcaa

Headers

File Characteristics

Imports

kernel32

user32

advapi32

rpcrt4

msvcrt

msvcp60

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 34KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 34KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB