703edf5e3bc53f4acbebaa13c94f97d1caf2fe188e214fbb6418c6ca52c4f785

General

Target

703edf5e3bc53f4acbebaa13c94f97d1caf2fe188e214fbb6418c6ca52c4f785
Size

860KB
MD5

4d87aeb8cd9f041712647faf5fc30520
SHA1

21d6d02092e8e869633e6f7d4c62167d2ec2715e
SHA256

703edf5e3bc53f4acbebaa13c94f97d1caf2fe188e214fbb6418c6ca52c4f785
SHA512

fb5c5d646d5dd083958d2c42d4a4772bbe5197b84bfe108e49f1876400b153eb077eab6027ac419897fd7fdbf8214df7679ff49f74fe03a820ede6a7f8db2ffe
SSDEEP

12288:MxTAbKWhJ55Y5II/m3Wcua6Xi6UsTQUDPZEET9x071Jlq5L7BMvsQR+8FXRFa7v:T+g75lnjua6XiOpDPGEpu7dG7B0sa+8

Score

N/A

Malware Config

Signatures

Files

703edf5e3bc53f4acbebaa13c94f97d1caf2fe188e214fbb6418c6ca52c4f785
.exe windows x86

4d0466185b84ce5c93bb6cd0b68582bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

EnumServicesStatusExW
RegEnumKeyA
RegQueryValueExA
SetKernelObjectSecurity
ControlTraceW
SetSecurityDescriptorOwner
WmiCloseBlock
WmiFileHandleToInstanceNameW
AbortSystemShutdownW
RegCreateKeyW
SystemFunction004
GetTraceEnableLevel
RegLoadKeyW
RegisterServiceCtrlHandlerA
SetSecurityDescriptorSacl

netapi32

NetFileGetInfo
NetpwNameValidate
NetServiceEnum
NetWkstaTransportEnum
DsGetDcNameWithAccountW
NetUserGetInfo
NetGetJoinInformation
NetSessionEnum
NetApiBufferFree
NetQueryDisplayInformation
NetUserDel

kernel32

SetConsoleMode
GetModuleHandleA
LocalReAlloc
AddAtomW
WriteConsoleOutputW
WritePrivateProfileStringA
GetUserDefaultUILanguage
GetSystemDirectoryA
SizeofResource
GetProfileStringW
Process32NextW
IsBadWritePtr
GetFileAttributesExW
DefineDosDeviceA
AddConsoleAliasA
TerminateProcess
CreateMailslotW
DeleteFileA
HeapAlloc
DisableThreadLibraryCalls
CreateDirectoryExA
GetNamedPipeInfo
ReadFileEx
OpenSemaphoreA
VirtualAlloc

mscms

InstallColorProfileW
OpenColorProfileW
UninstallColorProfileW
GetStandardColorSpaceProfileW
GetColorDirectoryA
CreateColorTransformA
CloseColorProfile
CreateColorTransformW

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.et
Size: 704KB - Virtual size: 984KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d0466185b84ce5c93bb6cd0b68582bd

Headers

File Characteristics

Imports

advapi32

netapi32

kernel32

mscms

Sections

.text Size: 80KB - Virtual size: 77KB

.et Size: 704KB - Virtual size: 984KB

.rsrc Size: 68KB - Virtual size: 66KB

.reloc Size: 4KB - Virtual size: 36B

.text
Size: 80KB - Virtual size: 77KB

.et
Size: 704KB - Virtual size: 984KB

.rsrc
Size: 68KB - Virtual size: 66KB

.reloc
Size: 4KB - Virtual size: 36B