3420b78e0e72403c42eef86ddfe21b95d3f2a44bc7034b1336c17ddfb7f8cebf

Sharing

Copy URL Twitter E-mail

General

Target

3420b78e0e72403c42eef86ddfe21b95d3f2a44bc7034b1336c17ddfb7f8cebf
Size

174KB
MD5

814570cd49ad24ef05ad98621f521a52
SHA1

7572470abfbc56d7051d4eccdd24f8711c8f8e45
SHA256

3420b78e0e72403c42eef86ddfe21b95d3f2a44bc7034b1336c17ddfb7f8cebf
SHA512

e65c475b169fe709f29b528825c17fbf630101c6f0390f49680c9e711d49ed785809dd7e361f4356c834a63c88be440627f08d93a96dbbc8e4109f317c050578
SSDEEP

3072:jAl8V3BKdvttDzZs6G9joGE9tQPxXB7cwo3Gy/EF:q8mZjHaoGi2tBcw8q

Score

N/A

Malware Config

Signatures

Files

3420b78e0e72403c42eef86ddfe21b95d3f2a44bc7034b1336c17ddfb7f8cebf
.exe windows x86

e1c8cc9a299f7557474701f48838350a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

TraceMessage
RegCloseKey
RegSetValueExW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
StartServiceCtrlDispatcherW
RegOpenKeyExW
SetServiceStatus
RegisterServiceCtrlHandlerExW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
OpenThreadToken
FreeSid
CheckTokenMembership
ConvertStringSidToSidW
RegQueryValueExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash

kernel32

LocalFree
GetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
CreateEventW
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
SetEvent
PostQueuedCompletionStatus
CreateThread
MultiByteToWideChar
LocalAlloc
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
RaiseException
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateIoCompletionPort
GetQueuedCompletionStatus
DeviceIoControl
GetVolumePathNameW
CreateFileW
GetFullPathNameW
DuplicateHandle
OpenProcess
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCommandLineA
GetVersionExA
RtlUnwind
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

ole32

CoRegisterClassObject
StringFromGUID2
CoRevokeClassObject
CoUninitialize
CoInitializeEx
CoImpersonateClient
CoRevertToSelf
CoInitializeSecurity

oleaut32

SysAllocStringLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocString

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e1c8cc9a299f7557474701f48838350a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

Sections

.text Size: 77KB - Virtual size: 77KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 2KB - Virtual size: 2KB

.cdata Size: 80KB - Virtual size: 80KB

.text
Size: 77KB - Virtual size: 77KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 2KB - Virtual size: 2KB

.cdata
Size: 80KB - Virtual size: 80KB