f530da54d564e69397106cf59b564fc9147fa8ab284320b3b8e782fa3a99571b

General

Target

f530da54d564e69397106cf59b564fc9147fa8ab284320b3b8e782fa3a99571b
Size

60KB
MD5

56e0729e013c21464f03abfd3636ec2d
SHA1

002c5e0a10114a9ef743f8cc24a45b2c78d8d3cc
SHA256

f530da54d564e69397106cf59b564fc9147fa8ab284320b3b8e782fa3a99571b
SHA512

57bfac679ab8a19ef83213bbe2d5ea4a1c3f2c7b4686c09f6533749a0587a460d3d862f2356bb03cbe9d2279a96070a09da62bf8a793f605f4ab1665191e6300
SSDEEP

768:1GXwHUcEbDub7uh+eTge6iVJfYPqu3Q2S0QY7Z9bRhmpr1UqR2zoOt++Ioe+IosX:tbG+e1QPfA29QY7HbRhIU9zoOScSc

Score

N/A

Malware Config

Signatures

Files

f530da54d564e69397106cf59b564fc9147fa8ab284320b3b8e782fa3a99571b
.exe windows x86

0c88679249e598e95060c5e32627e8e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
gethostname
gethostbyname
inet_ntoa

shlwapi

StrCmpNIA

advapi32

RegCloseKey
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
StartServiceA
RegCreateKeyExA
RegSetValueExA

netapi32

NetLocalGroupAddMembers
NetUserAdd

kernel32

SetEnvironmentVariableA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocalTime
CompareStringW
CompareStringA
SetStdHandle
GetOEMCP
FreeLibrary
CreateRemoteThread
GetModuleFileNameA
GetProcAddress
LoadLibraryA
WriteProcessMemory
VirtualAllocEx
OpenProcess
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateDirectoryA
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDrives
GetSystemDirectoryA
GetVersion
SetFileTime
GetFileTime
CreateFileA
GetEnvironmentVariableA
GetLastError
GetTimeZoneInformation
GetSystemTime
GetCommandLineA
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
GetFileAttributesA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
SetFilePointer
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
FlushFileBuffers
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetCPInfo
GetACP

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0c88679249e598e95060c5e32627e8e1

Headers

File Characteristics

Imports

ws2_32

shlwapi

advapi32

netapi32

kernel32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB