f34d8eca5e9fe8b1a25cfac2534e50c7bc099386a2f20ae1ef84f7d0914f1c01

Sharing

Copy URL

Twitter E-mail

General

Target

f34d8eca5e9fe8b1a25cfac2534e50c7bc099386a2f20ae1ef84f7d0914f1c01
Size

48KB
MD5

386f4393807caaf3e6c255b8cae2bb9e
SHA1

c2f08c012933646b070ab2a5d6ebfa0711b1acec
SHA256

f34d8eca5e9fe8b1a25cfac2534e50c7bc099386a2f20ae1ef84f7d0914f1c01
SHA512

b30b386c51c6c58c5b01a8d3cc0c53f6969b68ee299085a7604c11c78bd1473264da7b1d275589a63bf0a961dd88368616a407b6e74e1958156e6dfb4d7ea1a3
SSDEEP

1536:seFOLAJf2hDH0G2XOrB5ZO9T7SkRMoPO8nKEJJJs:rFuAJf2FH0G2XOrfgPSkRMgO8nKE5s

Score

N/A

Malware Config

Signatures

Files

f34d8eca5e9fe8b1a25cfac2534e50c7bc099386a2f20ae1ef84f7d0914f1c01
.exe windows x86

857a2bf30b110562dc3f0230c4a24075

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
EnterCriticalSection
LocalAlloc
LocalSize
GetACP
lstrlenA
CreateFileW
VirtualAlloc
CreateFileMappingW
GetEnvironmentVariableA
FindNextFileA
TlsSetValue
FindClose
TlsAlloc
PulseEvent
GetTempPathA
GetSystemTime
GetFileAttributesExW
GetModuleFileNameW
FindCloseChangeNotification
WideCharToMultiByte
FindFirstChangeNotificationW
GetModuleHandleA
FindFirstFileA
SetEvent
CompareFileTime
MapViewOfFile
InterlockedExchange
InterlockedCompareExchange
LeaveCriticalSection
OpenMutexA
GetFileAttributesA
CreateDirectoryW
CreateFileMappingA
CreateFileA
DelayLoadFailureHook
GetTickCount
FreeLibrary
LocalFree
SetEndOfFile
QueryPerformanceCounter
LocalReAlloc
GetDateFormatW
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
InitializeCriticalSection
CreateMutexA
SetFileAttributesA
WaitForMultipleObjectsEx
TlsFree
DeleteFileW
UnhandledExceptionFilter
OpenEventA
GetSystemDefaultLangID
SetFileAttributesW
GetLastError
lstrcpyA
SystemTimeToFileTime
LoadLibraryA
ReadFile
FindNextFileW
TlsGetValue
LoadLibraryExA
GetCurrentThread
GetProcAddress
WriteFile
WaitForSingleObjectEx
GetFileSize
OutputDebugStringA
GetVersionExA
InterlockedDecrement
TerminateProcess
OpenMutexW
CreateMutexW
CompareStringW
GetDateFormatA
GetCurrentThreadId
CreateEventA
CompareStringA
lstrlenW
FileTimeToLocalFileTime
GetTempFileNameA
FindFirstChangeNotificationA
GetUserDefaultLCID
GetCurrentProcess
SetFilePointer
FindFirstFileW
DeleteFileA
CreateThread
GetTimeFormatW
GetTimeFormatA
Sleep
FormatMessageA
InterlockedIncrement
FileTimeToSystemTime
WaitForSingleObject
ReleaseMutex
ExitThread
DeleteCriticalSection
FreeLibraryAndExitThread
UnmapViewOfFile
CreateDirectoryA
lstrcatA
SetLastError
ExpandEnvironmentStringsW
CloseHandle
lstrcmpA
DuplicateHandle
FormatMessageW
ExpandEnvironmentStringsA
LoadLibraryExW
GetFileAttributesW
GetModuleFileNameA
GetComputerNameW
OpenFileMappingW
MultiByteToWideChar
GetComputerNameA
FindNextChangeNotification

advapi32

ChangeServiceConfigA
InitializeAcl
RegEnumKeyExW
CryptGetHashParam
SystemFunction041
RegCreateKeyExA
EqualSid
CryptCreateHash
LookupAccountSidW
CryptSetProvParam
RegDeleteValueA
QueryServiceConfigA
OpenThreadToken
RegSetValueExW
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
AdjustTokenPrivileges
CryptImportKey
CryptAcquireContextA
RegNotifyChangeKeyValue
AllocateAndInitializeSid
MD5Final
RegSetKeySecurity
LsaNtStatusToWinError
GetSecurityDescriptorOwner
A_SHAInit
RegEnumValueA
CryptEncrypt
CryptSignHashA
CryptReleaseContext
CryptDestroyHash
MD5Update
OpenSCManagerW
CryptGetKeyParam
GetLengthSid
CryptSetProviderA
IsValidSid
RegCreateKeyExW
CloseServiceHandle
RegConnectRegistryA
RegEnumKeyA
UnlockServiceDatabase
GetAce
CryptGetDefaultProviderW
RegOpenKeyExW
RegQueryInfoKeyW
CryptHashData
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
RegQueryValueExW
CryptGenRandom
CryptSetKeyParam
GetSidSubAuthority
CryptExportKey
StartServiceW
RegQueryInfoKeyA
GetTokenInformation
SystemFunction040
CopySid
GetSecurityDescriptorDacl
A_SHAFinal
FreeSid
AddAccessAllowedAce
CryptDeriveKey
CryptVerifySignatureA
MD5Init
GetUserNameA
RegConnectRegistryW
GetSidSubAuthorityCount
RegEnumValueW
LockServiceDatabase
CryptGenKey
GetSidIdentifierAuthority
RegQueryValueExA
SetSecurityDescriptorDacl
RegDeleteKeyA
RegDeleteValueW
RegSetValueExA
GetUserNameW
CryptDecrypt
CryptGetProvParam
CryptGetUserKey
SetSecurityDescriptorGroup
ControlService
CryptDestroyKey
StartServiceA
LookupPrivilegeValueA
OpenProcessToken
OpenServiceW
RegDeleteKeyW
RegGetKeySecurity
CryptSetHashParam
QueryServiceStatus
A_SHAUpdate

user32

LoadStringW
GetProcessDefaultLayout
wsprintfA
LoadStringA
GetSystemMetrics
wsprintfW
MessageBoxW
MessageBoxA

rpcrt4

RpcStringFreeA
RpcStringFreeW
RpcStringBindingComposeW
UuidCreate
UuidToStringA
RpcStringBindingComposeA
RpcBindingFromStringBindingW
RpcBindingFree
RpcBindingSetAuthInfoExW
RpcBindingFromStringBindingA
NdrClientCall2
RpcImpersonateClient
RpcEpResolveBinding
RpcRevertToSelf

msvcrt

_wcsnicmp
_wcsicmp
_ltow
memmove
_itow
__dllonexit
isupper
sprintf
free
_adjust_fdiv
bsearch
strtoul
_except_handler3
isdigit
qsort
malloc
_ultoa
wcslen
isxdigit
wcscpy
wcschr
wcscat
_snwprintf
_ltoa
_snprintf
memcpy
wcscmp
strncmp
strncpy
_initterm
_onexit
atol

adsldpc

ADsFreeColumn

msasn1

ASN1BERDecZeroCharString
ASN1CEREncEndBlk
ASN1BEREncChar32String
ASN1DecSetError
ASN1_FreeEncoded
ASN1utf8string_free
ASN1BERDotVal2Eoid
ASN1_CreateDecoder
ASN1_CreateModule
ASN1BEREncBool
ASN1BEREoid2DotVal
ASN1BEREncExplicitTag
ASN1BERDecOpenType2
ASN1BERDecPeekTag
ASN1BERDecMultibyteString
ASN1CEREncGeneralizedTime
ASN1BERDecGeneralizedTime
ASN1BERDecOctetString2
ASN1CEREncNewBlkElement
ASN1BERDecBitString
ASN1BERDecEndOfContents
ASN1BEREncObjectIdentifier2
ASN1BERDecChar16String
ASN1BERDecEoid
ASN1BERDecChar32String
ASN1charstring_free
ASN1BEREncS32
ASN1BERDecCharString
ASN1_FreeDecoded
ASN1BERDecNotEndOfContents
ASN1BEREncOpenType
ASN1CEREncFlushBlkElement
ASN1CEREncBeginBlk
ASN1BERDecU32Val
ASN1CEREncUTCTime
ASN1_CloseModule
ASN1_Encode
ASN1BEREncU32
ASN1_CloseEncoder
ASN1BEREncOctetString
ASN1BERDecBool
ASN1BERDecOctetString
ASN1BEREncChar16String
ASN1BERDecUTF8String
ASN1_SetEncoderOption
ASN1BEREoid_free
ASN1ztcharstring_free
ASN1BEREncMultibyteString
ASN1BERDecS32Val
ASN1_CreateEncoder
ASN1_CloseDecoder
ASN1BERDecExplicitTag
ASN1BEREncEndOfContents
ASN1BEREncEoid
ASN1BEREncBitString
ASN1EncSetError
ASN1objectidentifier2_cmp
ASN1octetstring_free
ASN1bitstring_free
ASN1BEREncUTF8String
ASN1Free
ASN1BEREncSX
ASN1BERDecObjectIdentifier2
ASN1char32string_free
ASN1DecRealloc
ASN1BERDecSXVal
ASN1BERDecBitString2
ASN1BERDecUTCTime
ASN1intx_free
ASN1_Decode
ASN1char16string_free
ASN1BERDecOpenType
ASN1open_free
ASN1BEREncCharString

Sections

.textbss
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

857a2bf30b110562dc3f0230c4a24075

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

rpcrt4

msvcrt

adsldpc

msasn1

Sections

.textbss Size: - Virtual size: 1.2MB

.text Size: 512B - Virtual size: 416B

.rdata Size: 512B - Virtual size: 32B

.reloc Size: 1024B - Virtual size: 816B

.idata Size: 86KB - Virtual size: 85KB

.textbss
Size: - Virtual size: 1.2MB

.text
Size: 512B - Virtual size: 416B

.rdata
Size: 512B - Virtual size: 32B

.reloc
Size: 1024B - Virtual size: 816B

.idata
Size: 86KB - Virtual size: 85KB