9860d7f7dabc84cf0bbb53f2a39f7e6a60fa98d4f314bdad53f867a341357c16

Sharing

Copy URL Twitter E-mail

General

Target

9860d7f7dabc84cf0bbb53f2a39f7e6a60fa98d4f314bdad53f867a341357c16
Size

284KB
MD5

efbad1f73ebaaee8dba81ba239d7b09f
SHA1

5d37dc61d1e17a1a8ded2148f004c321f5d223f7
SHA256

9860d7f7dabc84cf0bbb53f2a39f7e6a60fa98d4f314bdad53f867a341357c16
SHA512

83d4f41d065bfc1a663243c212227367cd8bcbd37c2e85b7f9fda6b4cebc7c15f5581e786493e9eb570d1ae60dba85c76c316192c97a6cdd6083c4d5bd032e25
SSDEEP

6144:IP6w3cUukL6o49DuVo+RG0cSx7UukL6o49DuVo+RG0cSxaU:s68Z40GcxxIZ40GcxxN

Score

N/A

Malware Config

Signatures

Files

9860d7f7dabc84cf0bbb53f2a39f7e6a60fa98d4f314bdad53f867a341357c16
.exe windows x86

ead0daeccc06405d3df1f3b424dc5146

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
WinExec
GetCurrentThreadId
Sleep
GetCommandLineA
GetStartupInfoA
CreateMutexA
ReleaseMutex
SetUnhandledExceptionFilter
CreateDirectoryA
LockResource
SetFilePointer
ReadFile
GetLastError
GetTempPathA
FreeLibrary
lstrcatA
DeleteFileA
SetLastError
lstrcpyA
LoadLibraryA
GetProcAddress
FindResourceA
LoadResource
CreateFileA
SystemTimeToFileTime
GetWindowsDirectoryA
LocalFileTimeToFileTime
SetFileTime
SizeofResource
lstrlenA
GetCurrentProcess
MultiByteToWideChar
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcmpiA
CloseHandle
GetModuleHandleA
ExitProcess

user32

PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
wsprintfA
LoadCursorA
LoadIconA
BlockInput

advapi32

RegCloseKey
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA
RegOpenKeyExA
RegSaveKeyA
RegCreateKeyExA
RegRestoreKeyA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
CloseServiceHandle
CreateServiceA
OpenSCManagerA
StartServiceA
OpenServiceA
RegDeleteValueA
RegDeleteKeyA
LookupAccountNameA

shell32

ShellExecuteA

msvcrt

fwrite
_strrev
_strnset
_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
strtok
??2@YAPAXI@Z
strchr
_except_handler3
__CxxFrameHandler
??3@YAXPAX@Z
realloc
malloc
fclose
fopen
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 36B - Virtual size: 36B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ead0daeccc06405d3df1f3b424dc5146

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 260KB - Virtual size: 256KB

xiaohui Size: 36B - Virtual size: 36B

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 260KB - Virtual size: 256KB

xiaohui
Size: 36B - Virtual size: 36B