ccef27bce4cf733be488468ae98aa0037874476d02856228a64fbfe6980ba384

Sharing

Copy URL Twitter E-mail

General

Target

ccef27bce4cf733be488468ae98aa0037874476d02856228a64fbfe6980ba384
Size

128KB
MD5

add1c1939f8b28ac6e78679338e633ef
SHA1

8630744970eb53cc6acde70cf6068af74250f8d5
SHA256

ccef27bce4cf733be488468ae98aa0037874476d02856228a64fbfe6980ba384
SHA512

18de85c8575580c6ab4cf0592af9cde12608c8d14c1705021d3beaba589a874caacc13121f35abab52b699bc2ccf89cb967516fd7331dcb8a21a41793bb39288
SSDEEP

3072:9I87DhtTecP1tFtovONHBRl54iPK4zzb+0/Gexrw:+87Dp72+HDly94zH//5x

Score

N/A

Malware Config

Signatures

Files

ccef27bce4cf733be488468ae98aa0037874476d02856228a64fbfe6980ba384
.dll windows x86

811e456bb56b76ce52a8a1dd35f2db3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyW
RegDeleteValueW
CloseServiceHandle
RegOpenKeyExA
RegDeleteKeyA
InitializeSecurityDescriptor
FreeSid
GetTokenInformation
UnlockServiceDatabase
LookupAccountSidW
RegOpenKeyW
RegSetValueExA
LockServiceDatabase
RegQueryValueExW
RegCloseKey
RegEnumKeyExA
RegEnumKeyExW
LookupPrivilegeValueA
RegCreateKeyExW

version

GetFileVersionInfoA

kernel32

RtlUnwind
GetStringTypeW
LoadLibraryA
GetHandleInformation
IsValidLocale
GetModuleHandleA
GetProcAddress
CloseHandle
LocalFree
GetTempPathW
SetEvent
lstrcmpA
GetThreadLocale
GetACP
GetCPInfo
InitializeCriticalSection
HeapDestroy
GetCurrentDirectoryA
LCMapStringA
GetFileSize
FindResourceA
FreeLibrary
IsBadWritePtr
GetShortPathNameW
CreateFileW
CreateThread
GetModuleFileNameW
SuspendThread
SearchPathA
VirtualFree
IsBadStringPtrW
InterlockedExchange
ReleaseMutex
ExpandEnvironmentStringsA
lstrcmpW
CreateProcessA
ReadFile
VirtualAlloc
ExitProcess
GetSystemTime
HeapAlloc
GetCommandLineA
GetVersion
HeapCreate
HeapFree
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
CreateFileA
UnhandledExceptionFilter
GetOEMCP
FlushFileBuffers
SetStdHandle
SetEndOfFile
SetFilePointer
MultiByteToWideChar
LCMapStringW
GetStringTypeA

Exports

Exports

ETIJOJT

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

811e456bb56b76ce52a8a1dd35f2db3e

Headers

File Characteristics

Imports

advapi32

version

kernel32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 52KB - Virtual size: 55KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 52KB - Virtual size: 55KB

.reloc
Size: 8KB - Virtual size: 7KB