333ac7f52c6627fbae98a0098c7add91f86289384d9ff2583a82e382aa0e784d

Sharing

Copy URL Twitter E-mail

General

Target

333ac7f52c6627fbae98a0098c7add91f86289384d9ff2583a82e382aa0e784d
Size

128KB
MD5

c88db54148771673679726128fbb4046
SHA1

e12328f7fe4fcd28b96ced3c22c9adf109e4b655
SHA256

333ac7f52c6627fbae98a0098c7add91f86289384d9ff2583a82e382aa0e784d
SHA512

bfb990c8e7df97ee0c4763a0b528c1ce0dba87473382730facba8e12c5ddc48d204eb954b8bec9ea45f7e86fe3afa1c2a68ec453f000b70bf2d154186c7cc1c4
SSDEEP

1536:AbLfmjYGqe05NgSD/z5tO6fpOWCtIe5zf+Rp65j1Eppl18SaxU:iLp8oLXfhLGzf+Rp65jeppl1X

Score

N/A

Malware Config

Signatures

Files

333ac7f52c6627fbae98a0098c7add91f86289384d9ff2583a82e382aa0e784d
.exe windows x86

f7c1a137481062b1279c887488658bb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
GetLastError
OpenProcess
GetCurrentProcess
CreateFileA
CloseHandle
CreateToolhelp32Snapshot
Process32Next
GetSystemDirectoryA
Sleep
DeviceIoControl
Process32First
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
MultiByteToWideChar
ReadFile
SetHandleCount
GetFileType
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

advapi32

ControlService
OpenSCManagerA
LookupPrivilegeValueA
StartServiceA
CreateServiceA
DeleteService
OpenProcessToken
CloseServiceHandle
OpenServiceA
AdjustTokenPrivileges

psapi

EnumProcesses

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7c1a137481062b1279c887488658bb1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

psapi

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 6KB - Virtual size: 6KB