a998f4053d6b3d6cc5c1a81407535d1b55521127cf31e9d1aa39912d56f5e5a6

Sharing

Copy URL Twitter E-mail

General

Target

a998f4053d6b3d6cc5c1a81407535d1b55521127cf31e9d1aa39912d56f5e5a6
Size

146KB
MD5

1330b0ad0761e40eed596cfe45037a86
SHA1

b93924c8df8daeb01905cc70b77acce0d02ac43d
SHA256

a998f4053d6b3d6cc5c1a81407535d1b55521127cf31e9d1aa39912d56f5e5a6
SHA512

538835d8ac58b96911834be080c34b40c0fb8b3e86d6b9dd9f3e2238b000c9fbfb57f0d577e328658022446f9d139b49a02a5b645f3de317fe55410ae9f90cbc
SSDEEP

3072:s/inc2LRg3lGgQVfj4iuusPye1sZBPl+bGbdLrMvKYYakH7:s/ic2O1GgYeFv4BBbdMvRE7

Score

N/A

Malware Config

Signatures

Files

a998f4053d6b3d6cc5c1a81407535d1b55521127cf31e9d1aa39912d56f5e5a6
.dll windows x86

4988b6196ab853c7110d94e05bf2d07d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
lstrcatW
OpenProcess
ProcessIdToSessionId
CloseHandle
TerminateProcess
InterlockedIncrement
InterlockedDecrement
FlushFileBuffers
CompareFileTime
LoadLibraryA
SetFilePointer
SetEndOfFile
WriteFile
GetVersionExA
GetCurrentProcess
SetUnhandledExceptionFilter
DebugBreak
SwitchToThread
LocalAlloc
SetEvent
ResetEvent
DisableThreadLibraryCalls
CreateProcessW
InitializeCriticalSectionAndSpinCount
CreateSemaphoreW
InterlockedExchangeAdd
ReleaseSemaphore
LocalFree
CreateEventW
WaitForSingleObject
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
UnhandledExceptionFilter
GetCommandLineA
lstrcpyW
GetFileAttributesW
CreateThread
OpenEventW
VirtualFree
lstrcmpW
GetSystemDirectoryW
lstrlenW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
MultiByteToWideChar
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
RtlUnwind
VirtualQuery
ExitProcess
GetModuleHandleA
SetHandleCount
GetSystemInfo

user32

PostMessageW
SetActiveWindow
SetTimer
EnumWindows
GetFocus
SetForegroundWindow
SendMessageW
PeekMessageW
MsgWaitForMultipleObjects
EndDialog
PostThreadMessageA
DispatchMessageW
TranslateMessage

advapi32

RegQueryValueExA
RegOpenCurrentUser
StartServiceW
CreateProcessAsUserW
ControlService
CheckTokenMembership
DuplicateToken
DuplicateTokenEx
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceStatus
RegOpenKeyExW
RegQueryValueExW
FreeSid
AllocateAndInitializeSid
GetUserNameW
RegOpenKeyExA
RegCloseKey

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemAlloc
CLSIDFromProgID
CoTaskMemFree
CLSIDFromString
CoGetClassObject

rpcrt4

RpcBindingSetAuthInfoExW
RpcBindingFromStringBindingW
RpcBindingFree

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4988b6196ab853c7110d94e05bf2d07d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

rpcrt4

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 44KB - Virtual size: 76KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 44KB - Virtual size: 76KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB