825c5421a7f2d3236b48366177ca0b7305763da5fa8d591b87f74c3658620b24

General

Target

825c5421a7f2d3236b48366177ca0b7305763da5fa8d591b87f74c3658620b24
Size

86KB
MD5

24e219fbaa189bf6bd93dd9f3f694b90
SHA1

10e4a1324e253052f02b7b5b10a0f6212b2654bc
SHA256

825c5421a7f2d3236b48366177ca0b7305763da5fa8d591b87f74c3658620b24
SHA512

7684f23566892ea7b11ec4078b565fd0fffbbfd536b3e46ffa922dbd2eb43316e87c5d17e55077cf7e239eb5747bea733b2fc52250312ac8c9036fbd11f5cf57
SSDEEP

1536:U+HWq6rCM+wYuyKF0b41QNSITqVw+W9o1rgxz6cx6UfTXqq9o5732j:U+HF6rC/wYunF0bCAmYm1sxz6a6GTXqm

Score

N/A

Malware Config

Signatures

Files

825c5421a7f2d3236b48366177ca0b7305763da5fa8d591b87f74c3658620b24
.exe windows x86

3422f1defe7037aab2c0ad4b51772e5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
GetModuleFileNameA
CreateDirectoryA
GetSystemDirectoryA
GetCurrentThreadId
CreateFileA
SetFilePointer
ReadFile
lstrcmpA
DeleteFileA
GetFileAttributesA
FindResourceA
LoadResource
SetFileTime
SizeofResource
CloseHandle
SetLastError
GetProcAddress
lstrcmpiA
lstrlenA
lstrcpyA
MultiByteToWideChar
ExitProcess
lstrcatA
GetLastError
GetTempPathA
GetWindowsDirectoryA
FreeLibrary
LoadLibraryA
SetFileAttributesA
GetStartupInfoA
GetModuleHandleA

advapi32

StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA

msvcrt

malloc
strchr
strtok
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
realloc

netapi32

NetApiBufferFree
NetUserGetLocalGroups

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3422f1defe7037aab2c0ad4b51772e5f

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

netapi32

Sections

.text Size: 11KB - Virtual size: 11KB

.rsrc Size: 73KB - Virtual size: 73KB

.text
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 73KB - Virtual size: 73KB