a546b0703984db4313d90ff56c35390bbeeecc7f2d7cba1afdbda7a7d406b565

General

Target

a546b0703984db4313d90ff56c35390bbeeecc7f2d7cba1afdbda7a7d406b565
Size

23KB
MD5

ff778d8e04123b17de172cc06c46578b
SHA1

760e12b9d41c3d556f2ad47f9b8c80e7fa1729e3
SHA256

a546b0703984db4313d90ff56c35390bbeeecc7f2d7cba1afdbda7a7d406b565
SHA512

7e0525c5ec97bd8d5cc7d54d2f36a79729a0d7cd42aeca09250590e4b98f74aa28b657eaae6e9b6e93d40f53bfdb5466eab5804d1d873d20041737bed940ccff
SSDEEP

384:g2pF0+RoNRf+ZZ5nm4/yFJ5eusmBeQMMkDF:FFmv+j5m4aUPx

Score

N/A

Malware Config

Signatures

Files

a546b0703984db4313d90ff56c35390bbeeecc7f2d7cba1afdbda7a7d406b565
.dll windows x86

bf9dd6dd6b1a20e7fd366ad625bdbef8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
VirtualProtectEx
CreateProcessA
OpenProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetLastError
FreeLibrary
lstrcatW
GetSystemDirectoryW
lstrcpynA
ResumeThread
lstrcatA
GetSystemDirectoryA
DeviceIoControl
CreateRemoteThread
Module32Next
Module32First
GetTempFileNameA
GetTempPathA
CloseHandle
VirtualQueryEx
ExitProcess
GetLocalTime
WaitForSingleObject
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
Process32Next
lstrcpyA
lstrlenA
CreateFileA
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
DeleteFileA
GetCurrentProcess

advapi32

RegSetValueExA
ControlService
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyA
StartServiceA
RegCloseKey
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle

msvcrt

memcpy
memset
strrchr

imagehlp

ImageLoad
ImageUnload

Exports

Exports

testall

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf9dd6dd6b1a20e7fd366ad625bdbef8

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

imagehlp

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 742B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 742B