133b96ee19e819d8eb1b2c89163961589fb237ed491a707e0022ebba8c234a96

General

Target

133b96ee19e819d8eb1b2c89163961589fb237ed491a707e0022ebba8c234a96
Size

776KB
MD5

985fd5c85f386d5109b7f75ae55d4d9c
SHA1

576f1c791751d8669ccbceb2ccf494f646bbf0cb
SHA256

133b96ee19e819d8eb1b2c89163961589fb237ed491a707e0022ebba8c234a96
SHA512

36f064a9a1ca610732805c6fdc4651e57233b4be78b6a32109fef771deb73649e1195218374658f6e729071b1931d5c796b0abf23408057bfbe581473ec44a3e
SSDEEP

24576:Pb7CbBI0E5VYqxWMq0sgMg0y6rxwXkMPEiN//:fCbBcVa7rxOkMr/

Score

N/A

Malware Config

Signatures

Files

133b96ee19e819d8eb1b2c89163961589fb237ed491a707e0022ebba8c234a96
.exe windows x86

88543a2450f1ae85cd63c304f772583c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

LsaFreeMemory
QueryServiceStatusEx
CryptSignHashW
RegLoadKeyW
I_ScSetServiceBitsW
RegQueryValueExA
RegQueryMultipleValuesA
EqualPrefixSid
DuplicateTokenEx
RegSetValueExW

kernel32

WaitForMultipleObjects
Thread32Next
GetShortPathNameA
GetDefaultCommConfigW
SetEvent
GetACP
GetVersionExW
GetModuleFileNameW
GetSystemWindowsDirectoryW
WriteConsoleOutputW
SetLastError
SetComputerNameExA
DebugActiveProcess
SystemTimeToFileTime
UnmapViewOfFile
HeapUnlock
VirtualAlloc
PrivCopyFileExW
GetProfileStringW
GetProcessTimes

winmm

waveInGetDevCapsA
mixerGetLineControlsA
mmioGetInfo
midiOutClose
midiOutCachePatches
waveOutOpen
mmGetCurrentTask
waveOutGetNumDevs
mmioSetInfo
mmioDescend

netapi32

NetRemoteTOD
NetUserChangePassword
NetLocalGroupDel
NetWkstaUserSetInfo
NetServerDiskEnum
NetApiBufferFree
NetGroupSetInfo

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 159KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 439KB - Virtual size: 679KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88543a2450f1ae85cd63c304f772583c

Headers

File Characteristics

Imports

advapi32

kernel32

winmm

netapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.bss Size: 159KB - Virtual size: 186KB

BSS Size: 439KB - Virtual size: 679KB

.rsrc Size: 171KB - Virtual size: 171KB

.reloc Size: 512B - Virtual size: 32B

.text
Size: 4KB - Virtual size: 3KB

.bss
Size: 159KB - Virtual size: 186KB

BSS
Size: 439KB - Virtual size: 679KB

.rsrc
Size: 171KB - Virtual size: 171KB

.reloc
Size: 512B - Virtual size: 32B