63a7aecaae460f5bcb332f8c0469a4df8d4b3f1ad7187785771600425d8db3fc

Sharing

Copy URL Twitter E-mail

General

Target

63a7aecaae460f5bcb332f8c0469a4df8d4b3f1ad7187785771600425d8db3fc
Size

216KB
MD5

161acf361fd936989bcb823245424673
SHA1

40f97a19db64a1aa04f03887d2970b78ad8e65b1
SHA256

63a7aecaae460f5bcb332f8c0469a4df8d4b3f1ad7187785771600425d8db3fc
SHA512

828a1a36ece036a71bb64815c01b6950db2833026b0b3ee7fa95030b6abbd97bfb797d36621c17995bb0b25ae37a0860e99e551eec70853562a475caf7a74a88
SSDEEP

6144:ODi2jXfOCnUSY5QuZCePJ8AMqw6SWkMpwOtH5DNyo/bS5xjYbFnbfO8qaHAUGX3M:V2jXLnUSY5QuZCePJ8AMqw6SpMpwOtHq

Score

N/A

Malware Config

Signatures

Files

63a7aecaae460f5bcb332f8c0469a4df8d4b3f1ad7187785771600425d8db3fc
.exe windows x86

ada124ce7ac9e04f58e211c5a6e5fdb3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wprintf
iswalpha
iswdigit
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
wcschr
__setusermatherr
iswspace
wcslen
_vsnwprintf
??1exception@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
wcstoul
_ftol
wcscpy
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_ltow
wcscat
_snwprintf
?what@exception@@UBEPBDXZ
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
_CxxThrowException
_initterm
_except_handler3
??1type_info@@UAE@XZ
_controlfp
_wcsicmp

msvcp60

??1bad_alloc@std@@UAE@XZ

advapi32

StartServiceCtrlDispatcherW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
RegConnectRegistryW
RegOpenKeyW
RegSetValueExW
OpenSCManagerW
OpenServiceW
ControlService
RegCloseKey
CloseServiceHandle
SetServiceStatus
RegisterServiceCtrlHandlerExW
RegQueryValueExW

kernel32

QueryPerformanceCounter
GetCommandLineW
ExpandEnvironmentStringsW
CreateEventW
GetModuleHandleW
CreateThread
WaitForSingleObject
InterlockedIncrement
MultiByteToWideChar
LoadLibraryW
GetProcAddress
FormatMessageW
GetTickCount
Sleep
OpenEventW
SetEvent
CloseHandle
GetStdHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLastError
GetDateFormatW
LocalAlloc
GetTimeFormatW
LocalFree
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetFileType
WriteFile
WideCharToMultiByte
WriteConsoleW
GetTimeZoneInformation
FreeLibrary

ntdll

NtQuerySystemTime

user32

LoadStringW
DialogBoxParamW
EndDialog
GetDlgItem
EnableWindow
SendDlgItemMessageW
wsprintfW
CharUpperW

ws2_32

send
closesocket
recv
WSAEventSelect
WSACleanup
WSAStartup
WSALookupServiceBeginW
WSALookupServiceNextW
WSAGetLastError
WSALookupServiceEnd
socket
connect
gethostbyaddr

netapi32

DsGetDcNameW
NetServerEnum
NetApiBufferFree

w32time

W32TimeQueryNTPProviderStatus
W32TimeGetNetlogonServiceBits
W32TimeSyncNow

icmp

IcmpCreateFile
IcmpSendEcho
IcmpCloseHandle

ntdsapi

DsFreeDomainControllerInfoW
DsUnBindW
DsGetDomainControllerInfoW
DsBindW

shell32

CommandLineToArgvW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 164KB - Virtual size: 428KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ada124ce7ac9e04f58e211c5a6e5fdb3

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

msvcp60

advapi32

kernel32

ntdll

user32

ws2_32

netapi32

w32time

icmp

ntdsapi

shell32

Sections

.text Size: 36KB - Virtual size: 35KB

.data Size: 512B - Virtual size: 220B

.rsrc Size: 15KB - Virtual size: 14KB

.vmp0 Size: 164KB - Virtual size: 428KB

.text
Size: 36KB - Virtual size: 35KB

.data
Size: 512B - Virtual size: 220B

.rsrc
Size: 15KB - Virtual size: 14KB

.vmp0
Size: 164KB - Virtual size: 428KB