a4f87b2bedb103b477598f3b6c535048cd37d6aa46799e6e9aa2ef928a8d14a8

General

Target

a4f87b2bedb103b477598f3b6c535048cd37d6aa46799e6e9aa2ef928a8d14a8
Size

18KB
MD5

7ad7ca831b2a60cd21842d6b15f8ccd5
SHA1

628a55a7a4e5ae492234cc26d52e4ee4a91c4fab
SHA256

a4f87b2bedb103b477598f3b6c535048cd37d6aa46799e6e9aa2ef928a8d14a8
SHA512

23c453448f2ff9a5a739a6b719aa8673b30598c0978b0e282a1d4a1bb266d597028bdb0fa362bd1836001e1c64efbd0b5bdb6bcc5271c01f81de37cb44b81eae
SSDEEP

384:uma1TIEjIaC2p/yeifSAgEvYceSL1nbwixCvDcSalQ7cfTy+ePo:uPT5CuytfSuxCLctTyrg

Score

N/A

Malware Config

Signatures

Files

a4f87b2bedb103b477598f3b6c535048cd37d6aa46799e6e9aa2ef928a8d14a8
.dll windows x86

8f78c74aba712dcad303f48f556735fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetThreadContext
HeapAlloc
HeapFree
MoveFileA
OpenEventA
OpenProcess
Process32First
Process32Next
ReadFile
ResumeThread
GetStartupInfoA
SetFileAttributesA
SetFilePointer
SetThreadContext
Sleep
VirtualAllocEx
WaitForMultipleObjects
WaitForSingleObject
WriteProcessMemory
lstrcmpiA
lstrcpyA
lstrlenA
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFileSize
DeleteFileA
CreateToolhelp32Snapshot
CreateThread
CreateRemoteThread
CreateProcessA
CreateFileA
CreateEventA
SetEvent
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA
RegNotifyChangeKeyValue
RegCreateKeyA
RegCloseKey
OpenServiceA
OpenSCManagerA
OpenProcessToken
LookupPrivilegeValueA
DeleteService
ControlService
CloseServiceHandle
AdjustTokenPrivileges
RegSetValueExA

Exports

Exports

proc1

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f78c74aba712dcad303f48f556735fd

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 804B

.reloc Size: 512B - Virtual size: 280B

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 804B

.reloc
Size: 512B - Virtual size: 280B