c171e5dee07914b31be904d4871e5f722a213d98e0b7651ec8944d30c10baf67

Sharing

Copy URL Twitter E-mail

General

Target

c171e5dee07914b31be904d4871e5f722a213d98e0b7651ec8944d30c10baf67
Size

120KB
MD5

2f9ab40fd39c643940fb530b741f1cb0
SHA1

1dad725b33999156595397f0e31ba6c3b50d84d4
SHA256

c171e5dee07914b31be904d4871e5f722a213d98e0b7651ec8944d30c10baf67
SHA512

e0b8909f5c2f0a907f2e50fba3b667b74e9e4a0a7e7ad5536b8b54e135b56f052a87f0bbf40e9f3c3985b0a2bd628031049c801fc20dfcb49b68dd4507166e84
SSDEEP

3072:p1F2q93tDB/8Uob+1WeCHrjP2/Tpavx19url5LqqtnL0:p10q93tl0Uob+sDtvuPXtnL0

Score

N/A

Malware Config

Signatures

Files

c171e5dee07914b31be904d4871e5f722a213d98e0b7651ec8944d30c10baf67
.dll windows x86

e3d2053c43b9921de509e31280e3bca9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueA
RegDeleteValueA
GetSecurityDescriptorControl
RegQueryValueExA
RegQueryInfoKeyA
LookupPrivilegeValueA
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExW

kernel32

IsValidLocale
LoadLibraryA
GetModuleHandleA
GetHandleInformation
GetProcAddress
ExitProcess
lstrcmpiW
lstrcpynA
SetCurrentDirectoryA
CreateMutexW
GetShortPathNameW
SetFilePointer
ResumeThread
GetShortPathNameA
GetVersionExW
GetThreadTimes
GetTempFileNameW
LoadLibraryW
GetTempFileNameA
DeleteCriticalSection
ExpandEnvironmentStringsA
GetStringTypeW
lstrcmpW
CreateEventW
IsBadWritePtr
SystemTimeToFileTime
GetFileSize
HeapDestroy
LocalFree
GetProcessHeap
SearchPathW
GetFileType
GetVersion
GetSystemInfo
InterlockedIncrement
InterlockedExchange
GlobalFree
LCMapStringW
GetModuleFileNameA
CreateFileW
WriteConsoleA
lstrcpynW
ResetEvent
SetErrorMode
SuspendThread
HeapSize
VirtualAlloc
GetSystemTime
HeapAlloc
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
HeapCreate
VirtualFree
HeapFree
FatalAppExitA
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
CloseHandle
CreateFileA
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
GetStringTypeA
RtlUnwind

Exports

Exports

OBQLRQST

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3d2053c43b9921de509e31280e3bca9

Headers

File Characteristics

Imports

advapi32

kernel32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 52KB - Virtual size: 55KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 52KB - Virtual size: 55KB

.reloc
Size: 8KB - Virtual size: 6KB