345e70f2c2c58ed4b2ccd6c631e10fad505b9498a7c20ac5e98c06e65c02d8b1

Sharing

Copy URL Twitter E-mail

General

Target

345e70f2c2c58ed4b2ccd6c631e10fad505b9498a7c20ac5e98c06e65c02d8b1
Size

167KB
MD5

56187268d695b460ca6584be0c186f68
SHA1

d2ffa3cb493b02b7f619bf000f868b9bb8a1e083
SHA256

345e70f2c2c58ed4b2ccd6c631e10fad505b9498a7c20ac5e98c06e65c02d8b1
SHA512

cfe0a297fa79825c4de5b3b2aad9c1863a9d7c73fbb2a60c56904b874745012a0d7dfca8c455ce71d128778040e22a847c65e8ea58890826b242363b2c4070f3
SSDEEP

3072:/zRXbRgY2KXBUwsi3xeQiD4sWKllKwPYBo1SLwNysEtCMu:/zRrRt2KXBdsi30hD5TkBx8h

Score

N/A

Malware Config

Signatures

Files

345e70f2c2c58ed4b2ccd6c631e10fad505b9498a7c20ac5e98c06e65c02d8b1
.dll windows x86

a6eede0be4cf7589d2a97e832eb128cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
VirtualAlloc
WritePrivateProfileStringW
WaitForSingleObject
TerminateThread
Sleep
SetLastError
SetCurrentDirectoryW
ReleaseMutex
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GetVolumeNameForVolumeMountPointW
GetVolumeInformationW
GetVersionExW
GetTimeFormatW
GetTickCount
GetTapeParameters
GetProcAddress
GetPrivateProfileStringW
CreateDirectoryW
GetModuleFileNameW
GetLogicalDriveStringsW
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetDriveTypeW
GetDiskFreeSpaceExW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetComputerNameW
FreeLibrary
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateThread
CreateMutexW
CreateFileW

advapi32

RegCreateKeyExW
WriteEncryptedFileRaw
StartServiceW
SetSecurityDescriptorDacl
SetFileSecurityW
SetEntriesInAclW
ReportEventW
RegisterEventSourceW
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyW
RegOpenKeyExW
RegOpenKeyExA
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegConnectRegistryW
RegCloseKey
ReadEncryptedFileRaw
QueryServiceStatus
OpenThreadToken
OpenServiceW
OpenSCManagerW
OpenProcessToken
OpenEncryptedFileRawW
LookupPrivilegeValueW
LookupAccountSidW
InitializeSecurityDescriptor
InitializeAcl
GetUserNameW
GetTokenInformation
GetSecurityDescriptorDacl
GetAce
FreeSid
EqualSid
EnumDependentServicesW
EncryptFileW
AddAccessAllowedAce
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
CloseEncryptedFileRaw
CloseServiceHandle
ControlService
DecryptFileW
DeleteAce

msvcrt

_XcptFilter
__CxxFrameHandler
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_c_exit
_cexit
_controlfp
_errno
_exit
_fdopen
_filelength
_getpid
_initterm
_mbscpy
_mbslen
_onexit
_open_osfhandle
_purecall
_putenv
_tzset
_vsnwprintf
_wcmdln
_wcsdup
_wcsnicmp
_wcsrev
_wfopen
_wtoi
clearerr
exit
fclose
fflush
fread
fseek
ftell
fwrite
isalpha
isspace
localtime
mktime
swprintf
time
wcscpy
wcslen
wcsrchr
wcstok

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata2
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6eede0be4cf7589d2a97e832eb128cb

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 1024B - Virtual size: 1000B

.rdata2 Size: 127KB - Virtual size: 127KB

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 1024B - Virtual size: 1000B

.rdata2
Size: 127KB - Virtual size: 127KB

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 1KB - Virtual size: 1KB