9738c9b93a2133f2abcfa7723e80b6b54fa1f83878c2df00c79c75140bcdf273

General

Target

9738c9b93a2133f2abcfa7723e80b6b54fa1f83878c2df00c79c75140bcdf273
Size

63KB
MD5

7dbde47cb39b2c77ccf4aa7c7e15b68d
SHA1

2c38f6f5d1b10cfc58255d089cafd34dab185abe
SHA256

9738c9b93a2133f2abcfa7723e80b6b54fa1f83878c2df00c79c75140bcdf273
SHA512

1bc7737c0304587296d9b0c63118adcc15dd1095a004696ca1ae7971792c4d4c368a50f750ac565fd199fdeeac392eae77bb74facadbbbdfadae3a7813067511
SSDEEP

768:W8fyPJmcbfqfwbsPRYurFGqnv4jYdD0cWrwABMKWl8wgS9:W8WfS4bsKcs3UArwAOK4y6

Score

N/A

Malware Config

Signatures

Files

9738c9b93a2133f2abcfa7723e80b6b54fa1f83878c2df00c79c75140bcdf273
.exe windows x86

c93beea5200233c42343c47f88abb3ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ControlService
OpenSCManagerW
GetTokenInformation
FreeSid
GetSecurityInfo
OpenProcessToken
QueryServiceStatus
RegOpenKeyW
GetSidSubAuthority
RegSetValueExW
RegCloseKey
IsValidSecurityDescriptor
CloseServiceHandle
GetSidSubAuthorityCount
RegOpenKeyExW
SetTokenInformation
RegCreateKeyW
IsValidSid
AddAccessAllowedAce
StartServiceW
EqualSid
CopySid
LookupPrivilegeValueW

kernel32

GetCurrentProcessId
GetModuleHandleW
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
AreFileApisANSI
ClearCommBreak
HeapDestroy
Process32Next
GetTempFileNameA
GetBinaryTypeA
OpenFileMappingA
GetConsoleAliasesLengthW
BackupRead
FlushFileBuffers
GetBinaryTypeW
SetProcessShutdownParameters
GetPrivateProfileStringW
EnumLanguageGroupLocalesA
RtlFillMemory
Process32NextW
lstrcpy
FatalAppExitW
CreateProcessInternalA
CreateRemoteThread
SwitchToFiber
ReadDirectoryChangesW

ntdll

NtFlushWriteBuffer
RtlTraceDatabaseDestroy
ZwRequestPort
RtlImageNtHeader
RtlEqualDomainName
NtGetContextThread
RtlEnlargedUnsignedMultiply
RtlUnwind
RtlAreBitsSet
_aullrem
NtImpersonateClientOfPort
RtlFillMemoryUlong
RtlSubtreeSuccessor
RtlIsNameLegalDOS8Dot3
NtSetValueKey
NtCreateDirectoryObject
RtlAddAuditAccessAceEx

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c93beea5200233c42343c47f88abb3ab

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ntdll

Sections

.text Size: 31KB - Virtual size: 30KB

.data Size: 31KB - Virtual size: 62KB

.text
Size: 31KB - Virtual size: 30KB

.data
Size: 31KB - Virtual size: 62KB