5a204ab28e6976d90bd0166f1528d0860a1bf4e34e6a0f5f0e7d87425938a06e

Sharing

Copy URL Twitter E-mail

General

Target

5a204ab28e6976d90bd0166f1528d0860a1bf4e34e6a0f5f0e7d87425938a06e
Size

94KB
MD5

5cb67655738a3667a48494e037495edd
SHA1

51894a8f0e498482375a109aa36df0f882bd8a88
SHA256

5a204ab28e6976d90bd0166f1528d0860a1bf4e34e6a0f5f0e7d87425938a06e
SHA512

ae5b864c5873111b85cffa88180d50f6066068a5c09963c118a04d4af21fff9fced05c693d79e86e3fc62c25489f180ede6a07a5e95eccba65c92aac8d927f73
SSDEEP

1536:SGrWMIAxvp5LaWEzHsM5O1tfK0ksGz1b4lksmPcNdxQ8L22gdLcssF:VRIkLafYMgfKXskJM79BL2bdS

Score

N/A

Malware Config

Signatures

Files

5a204ab28e6976d90bd0166f1528d0860a1bf4e34e6a0f5f0e7d87425938a06e
.exe windows x86

4bdff18f58bccb8732aa58bb9c1cc793

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ssdpapi

FreeSsdpMessage
SsdpCleanup
FindServicesCancel
RegisterNotification
DHSetICSOff
DeregisterService
GetNextService
FindServicesClose
FindServices
FindServicesCallback
GetFirstService
DeregisterNotification
CleanupCache
SsdpStartup
DHSetICSInterfaces
RegisterService

advapi32

CancelOverlappedAccess
ClearEventLogA
RegOpenKeyExA
QueryServiceLockStatusW
LsaOpenPolicy
IsValidSid
RegDeleteKeyA
SetInformationCodeAuthzPolicyW
OpenServiceW
CreatePrivateObjectSecurityEx
LsaDelete
MD5Update
ConvertSecurityDescriptorToStringSecurityDescriptorA
CredReadDomainCredentialsW
CryptAcquireContextW
InitiateSystemShutdownA
CryptVerifySignatureA
SystemFunction024
UninstallApplication
ElfBackupEventLogFileW
SystemFunction016
SystemFunction029
BuildTrusteeWithNameA
RegSaveKeyExW
AddAccessAllowedAce
GetSidSubAuthorityCount
AccessCheckByTypeResultList
AbortSystemShutdownA
GetTrusteeTypeA
CredGetTargetInfoA
A_SHAFinal
LogonUserA

olecli32

DibSaveToStream
BmSaveToStream
OleGetLinkUpdateOptions
OleEnumObjects
OleDelete
LeCopy
OleSetData
OleQueryLinkFromClip
LeGetData
LeGetUpdateOptions
ErrQueryProtocol
DefCreateFromClip
OleEqual
BmGetData
DocWndProc
LeActivate
OleEnumFormats
MfSaveToStream
OleRevokeClientDoc
LeObjectConvert
LeSetHostNames
PbEnumFormats
PbLoadFromStream
OleRenameClientDoc
OleIsDcMeta
ErrActivate
ErrClose
SetNextNetDrive
LeSetTargetDevice
OleQueryReleaseStatus
PbCreateFromFile
LeSetData
MfCopy
LeSetBounds

kernel32

InitializeCriticalSectionAndSpinCount
VirtualAlloc
GetFileSizeEx
InitializeCriticalSection
SetProcessAffinityMask
AllocConsole
SetProcessPriorityBoost
GetConsoleAliasesLengthA
BaseInitAppcompatCacheSupport
DebugActiveProcessStop
WritePrivateProfileStringW
GetComputerNameExW
GetFileAttributesA
GetCurrentThread
SetConsoleHardwareState
PrivCopyFileExW
GetDefaultCommConfigA
GlobalAlloc
IsValidLocale
LoadLibraryA
GetModuleFileNameW
FileTimeToSystemTime
GetACP
DelayLoadFailureHook
WriteProfileSectionW
CloseConsoleHandle
BackupSeek
VerSetConditionMask
GetStartupInfoW
GetConsoleCP
SetHandleCount
GetLongPathNameA
IsValidLanguageGroup

msdart

?sm_llGlobalList@CLKRHashTable@@0VCLockedDoubleList@@A
?GetSpinCount@CReaderWriterLock3@@QBEGXZ
?ReadLock@CLKRLinearHashTable@@QBEXXZ
?ReadOrWriteUnlock@CCritSec@@QAEX_N@Z
?SetBucketLockSpinCount@CLKRLinearHashTable@@QAEXG@Z
SetMemHook
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SGNXZ
?SetDefaultSpinCount@CSmallSpinLock@@SGXG@Z
?ReadLock@CSpinLock@@QAEXXZ
?ReadUnlock@CFakeLock@@QAEXXZ
?WriteUnlock@CSmallSpinLock@@QAEXXZ
?Unlock@CLockedSingleList@@QAEXXZ
?WriteUnlock@CLKRLinearHashTable@@QBEXXZ
?_ExtractKey@CLKRLinearHashTable@@ABE?BKPBX@Z
?_LockSpin@CReaderWriterLock3@@AAEXW4SPIN_TYPE@1@@Z
MpGetHeapHandle
?RemoveHead@CLockedDoubleList@@QAEQAVCListEntry@@XZ
?_H1@CLKRLinearHashTable@@CGKKK@Z
?GetDefaultSpinAdjustmentFactor@CSpinLock@@SGNXZ
?_WriteLockSpin@CReaderWriterLock@@AAEXXZ
?_TryWriteLock@CReaderWriterLock3@@AAE_NJ@Z
?DeleteKey@CLKRHashTable@@QAE?AW4LK_RETCODE@@K@Z
??0CReaderWriterLock@@QAE@XZ
?InsertTail@CLockedDoubleList@@QAEXQAVCListEntry@@@Z
??0CSmallSpinLock@@QAE@XZ
?SetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SGXN@Z
?ReadLock@CSmallSpinLock@@QAEXXZ

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4bdff18f58bccb8732aa58bb9c1cc793

Headers

File Characteristics

Imports

ssdpapi

advapi32

olecli32

kernel32

msdart

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 10KB - Virtual size: 9KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 5KB - Virtual size: 4KB