888c9fec52ff3dd6dcc9c305a9d0c0ce61afca49a1e24305a156b781f2e7fce9

General

Target

888c9fec52ff3dd6dcc9c305a9d0c0ce61afca49a1e24305a156b781f2e7fce9
Size

308KB
MD5

484ab1dbfa7ff709da2a4fc2dd6a01e1
SHA1

40ada96cdbcc2d677f931c182dfb653596607a99
SHA256

888c9fec52ff3dd6dcc9c305a9d0c0ce61afca49a1e24305a156b781f2e7fce9
SHA512

081c817b738fe7d0df0cc4f2bc76ebcf3f9181dec72b4d0bcbffca1bed45e606ae63f3eee6bc045d59572bf53afe148c47408bc5e1c1325b676289459a90bf08
SSDEEP

6144:4eJlreJfge2wqtWGtwGxH69SG+KAbercDKnZU87+gL9VoaihmW0:7lrab2nWcwGxH69mbOwKnZZ9RVjihm

Score

N/A

Malware Config

Signatures

Files

888c9fec52ff3dd6dcc9c305a9d0c0ce61afca49a1e24305a156b781f2e7fce9
.exe windows x86

9be11a8cc08a0d54d681f669fecdb7ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetFileTime
CreateMutexW
GetStartupInfoW
lstrcpyA
GetModuleHandleA
FindResourceW
GetExitCodeProcess
ReadFile
GetLastError
HeapCreate
LoadLibraryA
SetFileTime
lstrcatA
IsBadWritePtr
LeaveCriticalSection
CreatePipe
InitializeCriticalSection
SetFileTime
CloseHandle
FormatMessageW
GetFileSize

mstscax

DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject

advapi32

CreateProcessAsUserA
RegQueryValueW
ClearEventLogW
IsValidSid
RegEnumKeyA
ControlService
InitializeSid
IsValidSecurityDescriptor
RegCreateKeyExW
IsValidAcl
IsTextUnicode
RegDeleteValueA
CreateServiceW

rasapi32

DwRasUninitialize

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rich
Size: 1KB - Virtual size: 176B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ole
Size: 512B - Virtual size: 112B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9be11a8cc08a0d54d681f669fecdb7ca

Headers

File Characteristics

Imports

kernel32

mstscax

advapi32

rasapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rich Size: 1KB - Virtual size: 176B

.RSRC Size: 293KB - Virtual size: 293KB

.ole Size: 512B - Virtual size: 112B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rich
Size: 1KB - Virtual size: 176B

.RSRC
Size: 293KB - Virtual size: 293KB

.ole
Size: 512B - Virtual size: 112B