a00881ccb4b7a170607616f1ed97109bab389866c26319571cb6f34abda1511b

Sharing

Copy URL Twitter E-mail

General

Target

a00881ccb4b7a170607616f1ed97109bab389866c26319571cb6f34abda1511b
Size

42KB
MD5

715e5d7cb0020d1bca9003fe2317e7f3
SHA1

00c54e6b9939afee68655a3fd94c4f566908eb62
SHA256

a00881ccb4b7a170607616f1ed97109bab389866c26319571cb6f34abda1511b
SHA512

6e4a51a6a80ac4deb0f177b9618012802d6110e237bf35ccfc7df957ba277969bc4a142ef726ab46df4c891e970ebb4565bd21cfaf62826202e4f9a2ce2c29c6
SSDEEP

768:EIHXTktX7aqT06EdFK+3vfwR5U6inE1zoFHTmkc+c7hQEJ:nDktX7KrdFJHwwnE1zonc+c7hB

Score

N/A

Malware Config

Signatures

Files

a00881ccb4b7a170607616f1ed97109bab389866c26319571cb6f34abda1511b
.exe windows x86

f203990eb89186e20385048163cc9ad0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
OpenProcess
CloseHandle
DuplicateHandle
GetCurrentProcess
InterlockedIncrement
GetCurrentProcessId
ExitProcess
DeleteTimerQueueTimer
InterlockedExchange
WaitForMultipleObjects
CreateThread
CreateEventA
CreateTimerQueueTimer
DisconnectNamedPipe
ReadFile
ConnectNamedPipe
CreateNamedPipeA
GetModuleHandleA
GetCommandLineA
GetVersionExA
RtlUnwind
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
InterlockedDecrement
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
InterlockedCompareExchange
Sleep
LoadLibraryExW
GetProcAddress
WideCharToMultiByte
GetLastError
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetSystemTimeAsFileTime
SetLastError
lstrcatW
lstrcpyW
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
ResetEvent
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InterlockedExchangeAdd
CreateMutexW
ReleaseMutex

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

user32

wsprintfW

rpcrt4

UuidCreate

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f203990eb89186e20385048163cc9ad0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

rpcrt4

Sections

.text Size: 35KB - Virtual size: 35KB

.data Size: 1024B - Virtual size: 9KB

.rsrc Size: 9KB - Virtual size: 20KB

.text
Size: 35KB - Virtual size: 35KB

.data
Size: 1024B - Virtual size: 9KB

.rsrc
Size: 9KB - Virtual size: 20KB