a0fe3245005837323e874cf35f31e0be3791348032fd71126d30eda8994b8441

Sharing

Copy URL Twitter E-mail

General

Target

a0fe3245005837323e874cf35f31e0be3791348032fd71126d30eda8994b8441
Size

283KB
MD5

b6400ddbe3bf931d5b49a687f53348ad
SHA1

f9db6765f6e8a0c41185063a61b7f314ff1adfc3
SHA256

a0fe3245005837323e874cf35f31e0be3791348032fd71126d30eda8994b8441
SHA512

a65519c77749971c8ccac67944d9e136bafdf0cc5c2a7ab820d24609e0eb7213d7ac3fdf10d47833434af0dfcc0a8b27353a77ac12bbe7c2b5cd37d9f8784af2
SSDEEP

6144:ya3tSs+JjI5CKC/bGT5OoXSSOvzR/F/rPJkc5lbQ:jSLE5iDGTNSr7Jk4Q

Score

N/A

Malware Config

Signatures

Files

a0fe3245005837323e874cf35f31e0be3791348032fd71126d30eda8994b8441
.exe windows x86

e942d63f7710c3b281b49b0b68b0894d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetFileAttributesW
LocalFree
HeapAlloc
WaitForSingleObject
OpenEventW
InterlockedExchange
Sleep
HeapFree
GetProcessHeap
CloseHandle
GetLastError
UnmapViewOfFile
VirtualFree
VirtualAlloc
MapViewOfFile
OpenFileMappingA
OpenEventA
OpenMutexA
ReleaseMutex
SetEvent
ResetEvent
LoadLibraryW
QueryPerformanceCounter
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
lstrlenA
GetProcAddress
CompareFileTime
ExpandEnvironmentStringsW
FindNextFileW
FindFirstFileW
FindClose
OutputDebugStringA
DisableThreadLibraryCalls
GetFileSize
GetPrivateProfileIntW
HeapSize
GetPrivateProfileSectionW
MapViewOfFileEx
CreateFileMappingW
WriteFile
CreateFileW
GetModuleHandleA
SetLastError
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrlenW
VirtualProtect
InterlockedDecrement
FreeLibrary
InterlockedIncrement
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
DeleteCriticalSection
InitializeCriticalSection
GetVersion
GetTickCount
GetSystemDirectoryW
GetStartupInfoA

user32

LoadStringW
wsprintfW

advapi32

RegSetValueExW
RegQueryValueExW
ConvertSidToStringSidW
CloseServiceHandle
QueryServiceStatus
StartServiceW
OpenServiceW
OpenSCManagerW
RegDeleteKeyW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueW
ReportEventW
RegDeleteValueW
DeregisterEventSource

ole32

CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CLSIDFromString
StringFromGUID2

rpcrt4

RpcBindingFree
RpcStringBindingComposeW
RpcBindingSetAuthInfoExW
RpcStringFreeW
NdrClientCall2
RpcBindingFromStringBindingW

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
__getmainargs
_acmdln
exit
_exit
wcslen
wprintf
wcstoul
malloc
_onexit
time
__CxxFrameHandler
_except_handler3
_vsnwprintf
_adjust_fdiv
_amsg_exit
wcsrchr
_wcsicmp
memset
memcpy
wcschr
wcsncmp
wcsstr
_wcslwr
_XcptFilter
free
_initterm
sprintf
_callnewh
_unlock
_CxxThrowException
_ltow
__dllonexit
_lock

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e942d63f7710c3b281b49b0b68b0894d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

rpcrt4

msvcrt

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 242KB - Virtual size: 483KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 242KB - Virtual size: 483KB

.rsrc
Size: 1KB - Virtual size: 1KB