d4f709dc3ce1348fd6b6eaee99f17422b5c6bde8dc6361607ee765336f5d8fa2

Sharing

Copy URL

Twitter E-mail

General

Target

d4f709dc3ce1348fd6b6eaee99f17422b5c6bde8dc6361607ee765336f5d8fa2
Size

96KB
MD5

725d1cf80755bb29a9df00353b6878e3
SHA1

a61b70e030b4ffd4d68692c71d3bd425866e0b45
SHA256

d4f709dc3ce1348fd6b6eaee99f17422b5c6bde8dc6361607ee765336f5d8fa2
SHA512

27805912cf3d6b9161d4e7e7c67d19a7e565176a01a0e5bfe323598336298446351aa60bc7bd446bab7246066ab81f5b15057509491e369a6ee9a13edffd49b3
SSDEEP

1536:pGKRP0acLckoXO3vr2h0JVfrhhbmSGdzPpztThlmL8H0hisTsh8E:YKR8acLcbO3Ch0J5r/mXtpztTh8M8iTh

Score

N/A

Malware Config

Signatures

Files

d4f709dc3ce1348fd6b6eaee99f17422b5c6bde8dc6361607ee765336f5d8fa2
.exe windows x86

514770f0984f17ca8129b36370696e4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA

advapi32

OpenServiceA
InitializeSecurityDescriptor
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
DeregisterEventSource
ReportEventA
RegisterEventSourceA
StartServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
QueryServiceStatus
ControlService
ConvertStringSecurityDescriptorToSecurityDescriptorA

rpcrt4

NdrServerCall2
RpcServerRegisterIf
RpcMgmtStopServerListening
RpcServerUnregisterIf
RpcServerUseProtseqEpA
RpcServerRegisterAuthInfoA
RpcServerListen

shlwapi

SHDeleteKeyA

kernel32

SetStdHandle
EnterCriticalSection
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetFilePointer
RtlUnwind
GetLastError
GetModuleFileNameA
Sleep
SetConsoleCtrlHandler
LocalFree
lstrlenA
FormatMessageA
CloseHandle
CreateNamedPipeA
CreateEventA
SetEvent
ExitProcess
TerminateProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetVersion
LeaveCriticalSection
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bvdxffh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

514770f0984f17ca8129b36370696e4c

Headers

File Characteristics

Imports

setupapi

advapi32

rpcrt4

shlwapi

kernel32

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 32KB - Virtual size: 32KB

bvdxffh Size: - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 32KB - Virtual size: 32KB

bvdxffh
Size: - Virtual size: 4KB