0ed07dd693ef2632d297c5c7d70720e78ed31462c464dbefe8021e9f571d6b13

Sharing

Copy URL Twitter E-mail

General

Target

0ed07dd693ef2632d297c5c7d70720e78ed31462c464dbefe8021e9f571d6b13
Size

109KB
MD5

33717c1f7f56e7c183ac05ecbb073d39
SHA1

6e6d51cff69f5e6b563307c3224e7f56a3a661ab
SHA256

0ed07dd693ef2632d297c5c7d70720e78ed31462c464dbefe8021e9f571d6b13
SHA512

6534bfff4141edfc4bd593f89430a1d8011b2b1bee458156e3429454304b77165080c601672aac780f27fc5ca1e6ae51dc6d52d895cb463f1a78f96fbd3d95cb
SSDEEP

3072:A2g66VVyLWCu0IswNrbLob5prcIe5jrwkLHerkno:A2g66VVyAHNILrVwvwkLHeQo

Score

N/A

Malware Config

Signatures

Files

0ed07dd693ef2632d297c5c7d70720e78ed31462c464dbefe8021e9f571d6b13
.exe windows x86

c953cc321aa91e33eb9e606ee6d15999

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
HeapFree
GetProcAddress
HeapAlloc
GetProcessHeap
ReadFile
SetFilePointer
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateDirectoryA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
Sleep
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
WinExec
GetStartupInfoA
SetLastError
GetTempPathA
GetTickCount
FindResourceA
LoadResource
CreateFileA
FindFirstFileA
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
lstrlenA
lstrcpyA
FreeResource
MoveFileA
SetFileAttributesA
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
ExitProcess
CreateProcessA
GetThreadContext
ReadProcessMemory
GetModuleFileNameA
lstrcmpiA
GetModuleHandleA
VirtualAllocEx
WriteProcessMemory
SetThreadContext
ResumeThread
TerminateProcess
GetSystemDirectoryA
lstrcatA
GetFileAttributesA

user32

GetMessageA
wsprintfA
GetInputState
PostThreadMessageA

advapi32

RegRestoreKeyA
OpenServiceA
StartServiceA
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegOpenKeyExA
RegSaveKeyA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
GetUserNameA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA

msvcrt

_exit
_controlfp
memset
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
_except_handler3
strlen
??3@YAXPAX@Z
rand
strchr
strstr
realloc
malloc
??1type_info@@UAE@XZ
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

ntdll

ZwUnmapViewOfSection

netapi32

NetApiBufferFree
NetUserGetLocalGroups

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c953cc321aa91e33eb9e606ee6d15999

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

ntdll

netapi32

Sections

.text Size: 12KB - Virtual size: 11KB

.rsrc Size: 96KB - Virtual size: 96KB

.text
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 96KB - Virtual size: 96KB