de123fb2266e24e782af2793be52843f60dfdd99a4b5b2064096566f24c98049

General

Target

de123fb2266e24e782af2793be52843f60dfdd99a4b5b2064096566f24c98049
Size

80KB
MD5

54452f5ca86cca0de93e721e9453b06a
SHA1

77926b11b3cfa390417e2a6656824d98ff2f275b
SHA256

de123fb2266e24e782af2793be52843f60dfdd99a4b5b2064096566f24c98049
SHA512

b3d9ea1c5de8a516ec28ea58d52a9d3e25e93c5dda2d809522a03497a29604b355d6042da4cb2672c4aa9b745efdb7a860664c010258bfc89db2a4664efa3169
SSDEEP

1536:TFyMLVRbLbW9E7gj06TLOArg+YpmMo5Vzn/SNn5OUPN:hV1bWqclG+YphInW5OUP

Score

N/A

Malware Config

Signatures

Files

de123fb2266e24e782af2793be52843f60dfdd99a4b5b2064096566f24c98049
.dll windows x86

39de7a081333b5ec3f48869566ed45ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_initterm
wcslen
memcmp
time
srand
rand
strcpy
_tempnam
_open
_write
_close
_lseek
_read
free
malloc
remove
strchr
strlen
strrchr
sprintf
realloc
strcat
_strlwr
strstr
strcmp

kernel32

LocalFree
OpenProcess
GetCurrentProcess
DuplicateHandle
WideCharToMultiByte
DeleteFileA
GetModuleFileNameA
CloseHandle
CreateFileA
lstrcmpiA
GetSystemDirectoryA
DeviceIoControl
TerminateThread
CreateThread
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
CreateEventA
GetLastError
SetFileTime
FlushFileBuffers
WriteFile
ReadFile
SetEndOfFile
SetFilePointer
GetFileSize
GetFileAttributesA
SystemTimeToFileTime
GetSystemTime
WaitForSingleObject
GetModuleHandleA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
SetEntriesInAclA
OpenProcessToken
GetTokenInformation
SetSecurityInfo
RegEnumKeyExA
RegDeleteKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyA
RegQueryInfoKeyA
RegEnumValueA
RegFlushKey
GetUserNameA
LookupAccountSidA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCloseKey

wtsapi32

WTSEnumerateProcessesA
WTSFreeMemory

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39de7a081333b5ec3f48869566ed45ec

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

wtsapi32

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 60KB - Virtual size: 56KB

.reloc Size: 4KB - Virtual size: 816B

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 60KB - Virtual size: 56KB

.reloc
Size: 4KB - Virtual size: 816B