ad13de67cf50de6149b3b183a132792e8d144a2caf6e25679f9e7626dcddbc35

Sharing

Copy URL Twitter E-mail

General

Target

ad13de67cf50de6149b3b183a132792e8d144a2caf6e25679f9e7626dcddbc35
Size

108KB
MD5

7cbaf85e9f9e77b828a87185acf070e5
SHA1

17f16a34f2c0d8d7b86890d3335b620e278c7403
SHA256

ad13de67cf50de6149b3b183a132792e8d144a2caf6e25679f9e7626dcddbc35
SHA512

e9d6655e4afe022c16f7f1d9e608073ef67809a1b71a6a070ad88ccd7c2793e5d4c290d4c4e4429234be157a853b9f4f8abd4f612fb3216f8aa4ab6b323fc8b3
SSDEEP

1536:1BpIDbZSCVhnjCfD+9GKiMIclWpXXeCwvLQnrccLUeEj5FDL3TLw2:1/WjCf8TBIclW9WQnwdea3TLr

Score

N/A

Malware Config

Signatures

Files

ad13de67cf50de6149b3b183a132792e8d144a2caf6e25679f9e7626dcddbc35
.exe windows x86

e2d8439306b164c3285b91f0ce6cfbb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcBindingInqAuthClientW
RpcImpersonateClient
RpcRevertToSelf
RpcBindingVectorFree
RpcEpUnregister
RpcMgmtWaitServerListen
RpcServerListen
RpcServerRegisterAuthInfoW
RpcEpRegisterW
RpcServerInqBindings
RpcServerRegisterIfEx
NdrServerCall2
RpcMgmtStopServerListening
RpcServerUseProtseqW

kernel32

lstrcpyW
CloseHandle
GetFileSize
FlushFileBuffers
WaitForSingleObject
GetExitCodeProcess
CreateEventW
SetEvent
OpenEventW
ResetEvent
GetVersion
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynW
SetErrorMode
CopyFileW
CompareFileTime
GetModuleHandleW
SetFileAttributesW
GetSystemDirectoryW
HeapAlloc
GetProcessHeap
HeapFree
FormatMessageW
Sleep
SetConsoleCtrlHandler
GetCommandLineW
RtlUnwind
LoadLibraryA
GetStartupInfoA
LoadLibraryW
GetProcAddress
FreeLibrary
GetSystemInfo
SuspendThread
ResumeThread
TerminateProcess
GetWindowsDirectoryW
lstrlenW
lstrcatW
CreateFileW
CreateProcessW
GetLocaleInfoA
GetLastError
LocalAlloc
GetCurrentThread
LocalFree
InterlockedExchange
VirtualQuery
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapSize
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
VirtualProtect
GetModuleFileNameW
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
IsBadWritePtr
HeapReAlloc
ExitProcess
GetModuleHandleA
GetCurrentProcess
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc

user32

WaitForInputIdle
wsprintfW

advapi32

AllocateAndInitializeSid
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
OpenServiceW
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerW
CreateServiceW
CloseServiceHandle
SetServiceStatus
RegisterEventSourceW
ReportEventW
DeregisterEventSource
IsValidAcl
IsValidSecurityDescriptor
RegOpenKeyW
RegQueryValueExW
RegCloseKey
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
ImpersonateSelf
OpenThreadToken
AccessCheck
FreeSid
RevertToSelf

shell32

CommandLineToArgvW

ole32

OleUninitialize
OleInitialize

netapi32

NetShareGetInfo
NetApiBufferFree

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2d8439306b164c3285b91f0ce6cfbb5

Headers

File Characteristics

Imports

rpcrt4

kernel32

user32

advapi32

shell32

ole32

netapi32

version

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 52KB - Virtual size: 52KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 52KB - Virtual size: 52KB