9624fd79b3086ed6d491751c99199b2b89ead9bad46d9b25ff705fc400e74718

Sharing

Copy URL Twitter E-mail

General

Target

9624fd79b3086ed6d491751c99199b2b89ead9bad46d9b25ff705fc400e74718
Size

247KB
MD5

65cd6348d9815ed9eee94c56188efcd7
SHA1

be3d9d03e2a128017224d5fe9f9f8290d43d2864
SHA256

9624fd79b3086ed6d491751c99199b2b89ead9bad46d9b25ff705fc400e74718
SHA512

dd7612fbf532297cb8c826332143e0f6f217308cdb9ae8ebba362d97ad7169b185c3586c2eb524f14088555792265d13f6ee4d0f5a4c5b58efd3be29d6ca3037
SSDEEP

6144:48IX4ZCpZrZ9YebjlJ6RZAca//////////////v///:9ZUZ1CeflJN

Score

N/A

Malware Config

Signatures

Files

9624fd79b3086ed6d491751c99199b2b89ead9bad46d9b25ff705fc400e74718
.exe windows x86

108a45713a8af21b0552316f96b1f297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenEventLogW
RegQueryValueExA
RegCreateKeyExA
RegEnumValueA
NotifyChangeEventLog
CloseEventLog
RegisterEventSourceA
RegOpenKeyA
RegOpenKeyExA
RegSaveKeyA
BackupEventLogA

shlwapi

StrChrW
PathStripPathW
PathMakeSystemFolderA
PathFindFileNameW
SHDeleteKeyA
SHQueryInfoKeyA
StrToIntW
PathRenameExtensionA
SHGetValueW
PathAddBackslashA
PathFindOnPathA
StrChrIW
PathCanonicalizeW

kernel32

GetModuleHandleA
VirtualAllocEx
SetEvent
PulseEvent
OpenMutexA
SuspendThread
GetProcAddress
InitializeCriticalSection
EnterCriticalSection
GlobalMemoryStatus
GetCPInfo
GetStringTypeA
VirtualAlloc
VerLanguageNameA
HeapSize
HeapCreate
VirtualLock
IsBadReadPtr
GlobalReAlloc
VirtualFree
WaitForSingleObject
GlobalSize
GetStartupInfoA

version

GetFileVersionInfoSizeA
VerFindFileA
VerInstallFileA
GetFileVersionInfoA
VerQueryValueA

netapi32

NetAuditClear
NetConfigSet
NetGroupAddUser
NetFileGetInfo
NetConfigGetAll
NetFileEnum
NetAuditWrite
NetConnectionEnum
NetErrorLogRead
NetErrorLogWrite
NetAuditRead
NetErrorLogClear
NetConfigGet
NetGroupAdd
NetGroupGetInfo
NetGroupSetInfo
NetFileClose

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__mb_cur_max
_isctype
_pctype

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 565KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

108a45713a8af21b0552316f96b1f297

Headers

File Characteristics

Imports

advapi32

shlwapi

kernel32

version

netapi32

msvcrt

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 203KB - Virtual size: 565KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 203KB - Virtual size: 565KB

.rsrc
Size: 25KB - Virtual size: 25KB