a141ccd132f7fbbba8d77d74d7ee5afe5aea6f8ec2ec8ed47b98fb93b9621b51

Sharing

Copy URL Twitter E-mail

General

Target

a141ccd132f7fbbba8d77d74d7ee5afe5aea6f8ec2ec8ed47b98fb93b9621b51
Size

32KB
MD5

5237cabb5fd259c1bf81cf35c62dcb3a
SHA1

4af4dbf6cea1cb4a609a5f4fcb4478504eb100ca
SHA256

a141ccd132f7fbbba8d77d74d7ee5afe5aea6f8ec2ec8ed47b98fb93b9621b51
SHA512

518cd974153cf352f06c98d342e7de45d75277f6a30cf96fd448d9b7f25d9f34d7133bed0d7a0bac7c3768d9ad95bc9f345c3c4b0d3b6e7b00220003f7f7d625
SSDEEP

384:pSKTuqZrxcy4l9i13efmvPJmrAnk61svNCQKD83XcvFsZUU8FyKD:jbxj4l9iNeEhmrAk8KCEncvd5

Score

N/A

Malware Config

Signatures

Files

a141ccd132f7fbbba8d77d74d7ee5afe5aea6f8ec2ec8ed47b98fb93b9621b51
.exe windows x86

1a5162b97bd8c218a6d2f3d462e696cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
lstrlenA
WriteFile
SetFileTime
LocalFileTimeToFileTime
FindFirstFileA
CreateFileA
LoadResource
FindResourceA
GetTickCount
GetTempPathA
lstrcpyA
SetLastError
ReadFile
Process32Next
FreeResource
CreateToolhelp32Snapshot
GetModuleHandleA
CreateThread
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateDirectoryA
GetFileAttributesA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
MoveFileA
SetFilePointer
DeleteFileA
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
CloseHandle
OutputDebugStringA
lstrcpynA
lstrcmpA
GetLastError
LocalFree
GetProcAddress
LocalAlloc
ExitProcess
CreateProcessA
GetThreadContext
ReadProcessMemory
GetModuleFileNameA
lstrcmpiA
WriteProcessMemory
SetThreadContext
ResumeThread
LoadLibraryA
Process32First

user32

wsprintfA
DispatchMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
PostThreadMessageA
GetInputState
BlockInput
GetMessageA

advapi32

RegQueryValueExA
GetUserNameA
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegRestoreKeyA
RegSaveKeyA
RegCreateKeyA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
StartServiceA
OpenServiceA
RegSetValueExA

ntdll

RtlUnwind
_chkstk
strstr
memcpy
strchr
strlen
memset
ZwUnmapViewOfSection
_strcmpi

netapi32

NetApiBufferFree
NetUserGetLocalGroups

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
CM_Get_DevNode_Status
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceInstallParamsA
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA

msvcrt

_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
rand
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
__CxxFrameHandler
malloc
realloc
printf
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a5162b97bd8c218a6d2f3d462e696cd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ntdll

netapi32

setupapi

msvcrt

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 5KB