59999d405305a594e4443232c67b61b40407907b21879e7b0846cb5bff06caf8

Sharing

Copy URL Twitter E-mail

General

Target

59999d405305a594e4443232c67b61b40407907b21879e7b0846cb5bff06caf8
Size

200KB
MD5

76eb287117c5ac41a9969018a57fa372
SHA1

0f84050cee2d4d8057c84a517e24e09751807b76
SHA256

59999d405305a594e4443232c67b61b40407907b21879e7b0846cb5bff06caf8
SHA512

822db95e79afe0c6cc11366707b0414998221760d3403d3bf9cb6cabd44821d46d1117f98f152c043035a470f9720d10ee4c5ed923ec17823d601cb43679e9fd
SSDEEP

3072:z0hAS55SCi6gtYRVdPjPWrvBEeK4JqH3qmVTBft2bxfaIhFS4BV:zG55Di6BVjWrvBw48HamVTBlGxfNhFSU

Score

N/A

Malware Config

Signatures

Files

59999d405305a594e4443232c67b61b40407907b21879e7b0846cb5bff06caf8
.exe windows x86

b426da311969908b554466816a0a3b77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateDirectoryA
GetFileAttributesA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
GetModuleFileNameA
ReadFile
GetProcessHeap
HeapAlloc
HeapFree
GetLastError
GetWindowsDirectoryA
SetLastError
lstrcpyA
LoadLibraryA
GetProcAddress
GetTempPathA
GetTickCount
FindResourceA
LoadResource
CreateFileA
GetSystemDirectoryA
lstrcatA
FindFirstFileA
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
lstrlenA
ExitProcess
FreeResource
MoveFileA
Sleep
SetFileAttributesA
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
TlsAlloc
TlsGetValue
VirtualFree
VirtualAlloc
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount

user32

DefWindowProcA
DispatchMessageA
GetMessageA
CreateWindowExA
RegisterClassExA
PostThreadMessageA
GetInputState
wsprintfA

advapi32

GetAclInformation
RegDeleteValueA
RegDeleteKeyA
OpenServiceA
StartServiceA
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
OpenSCManagerA
CloseServiceHandle
RegCreateKeyA
RegSaveKeyA
RegCloseKey
RegCreateKeyExA
RegRestoreKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
GetUserNameA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

ntdll

NtQueryVirtualMemory
strlen
strchr
strstr
strcpy
strcat
RtlUnwind
memset
memcpy

netapi32

NetUserGetLocalGroups
NetApiBufferFree

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b426da311969908b554466816a0a3b77

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ntdll

netapi32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 12KB - Virtual size: 13KB

.sxdata Size: 4KB - Virtual size: 4B

.rsrc Size: 144KB - Virtual size: 140KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 12KB - Virtual size: 13KB

.sxdata
Size: 4KB - Virtual size: 4B

.rsrc
Size: 144KB - Virtual size: 140KB