981262cba78fcb47d43d1fad3ac3ebf8f28e5b817fbd9e0e086245aeaca96c71

General

Target

981262cba78fcb47d43d1fad3ac3ebf8f28e5b817fbd9e0e086245aeaca96c71
Size

776KB
MD5

62461bf38a1d7d8a9a2d94d682589a9d
SHA1

a4a0f16c704aac75384ef897776d7ed9f56db09b
SHA256

981262cba78fcb47d43d1fad3ac3ebf8f28e5b817fbd9e0e086245aeaca96c71
SHA512

5741e29fd7817aae41dfa01962deba53a69cf20b589b78152f76bddcb59d025a163874a9aa8335a9aec2c77721499b5f2bd4e83fb4fcc966669391b5a87a2e8b
SSDEEP

24576:Hb7CbBI0E5VYqxWMq0sgMg0y6rxwXkMP8N//:3CbBcVa7rxOkMU/

Score

N/A

Malware Config

Signatures

Files

981262cba78fcb47d43d1fad3ac3ebf8f28e5b817fbd9e0e086245aeaca96c71
.exe windows x86

88543a2450f1ae85cd63c304f772583c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

LsaFreeMemory
QueryServiceStatusEx
CryptSignHashW
RegLoadKeyW
I_ScSetServiceBitsW
RegQueryValueExA
RegQueryMultipleValuesA
EqualPrefixSid
DuplicateTokenEx
RegSetValueExW

kernel32

WaitForMultipleObjects
Thread32Next
GetShortPathNameA
GetDefaultCommConfigW
SetEvent
GetACP
GetVersionExW
GetModuleFileNameW
GetSystemWindowsDirectoryW
WriteConsoleOutputW
SetLastError
SetComputerNameExA
DebugActiveProcess
SystemTimeToFileTime
UnmapViewOfFile
HeapUnlock
VirtualAlloc
PrivCopyFileExW
GetProfileStringW
GetProcessTimes

winmm

waveInGetDevCapsA
mixerGetLineControlsA
mmioGetInfo
midiOutClose
midiOutCachePatches
waveOutOpen
mmGetCurrentTask
waveOutGetNumDevs
mmioSetInfo
mmioDescend

netapi32

NetRemoteTOD
NetUserChangePassword
NetLocalGroupDel
NetWkstaUserSetInfo
NetServerDiskEnum
NetApiBufferFree
NetGroupSetInfo

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 159KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 439KB - Virtual size: 679KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88543a2450f1ae85cd63c304f772583c

Headers

File Characteristics

Imports

advapi32

kernel32

winmm

netapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.bss Size: 159KB - Virtual size: 186KB

BSS Size: 439KB - Virtual size: 679KB

.rsrc Size: 171KB - Virtual size: 171KB

.reloc Size: 512B - Virtual size: 32B

.text
Size: 4KB - Virtual size: 3KB

.bss
Size: 159KB - Virtual size: 186KB

BSS
Size: 439KB - Virtual size: 679KB

.rsrc
Size: 171KB - Virtual size: 171KB

.reloc
Size: 512B - Virtual size: 32B