a463ff791db7141be2758e378a0dac9855cebc0f93a4eb5148bab7e491b9d3a4

Sharing

Copy URL Twitter E-mail

General

Target

a463ff791db7141be2758e378a0dac9855cebc0f93a4eb5148bab7e491b9d3a4
Size

71KB
MD5

bc0a57f8160563cf7cb7f14bd641d2b5
SHA1

9762a7f64ef9c285075e3d6ae5bfacbd80a1db00
SHA256

a463ff791db7141be2758e378a0dac9855cebc0f93a4eb5148bab7e491b9d3a4
SHA512

ee25c158b37aa5b119223a22c66dde196b703ad11fbc3d2e9a5c2231b257d2fec8afc8fd9f7328818b8b5fa6d13e3e124e9fbcff92fde2aae18e6a2a207d5b55
SSDEEP

1536:05WsnP0fr+ooHQet/EHZSeNxY8HG4nRAw:pfAHQeCc4nRb

Score

N/A

Malware Config

Signatures

Files

a463ff791db7141be2758e378a0dac9855cebc0f93a4eb5148bab7e491b9d3a4
.dll windows x86

1d6fc92d98f48b6efa08d890089341d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons

kernel32

LoadLibraryA
CloseHandle
ReadFile
SetFilePointer
GetFileSize
CreateFileA
lstrcatA
WriteFile
SetFileTime
GetFileTime
lstrlenA
DeleteFileA
WinExec
FindClose
GetProcAddress
FindFirstFileA
GetDriveTypeA
GetLogicalDrives
TerminateThread
CreateThread
GetSystemDirectoryA
lstrcpyA
SetEvent
CreateEventA
GetLastError
GetVersionExA
GetACP
GetLocaleInfoA
Sleep
FindNextFileA
FlushFileBuffers
WriteConsoleW
HeapAlloc
GetModuleHandleW
ExitProcess
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
RtlUnwind
GetCPInfo
GetOEMCP
IsValidCodePage
HeapSize
GetConsoleCP
GetConsoleMode
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP

advapi32

RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

Exports

Exports

ServiceMain

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d6fc92d98f48b6efa08d890089341d4

Headers

File Characteristics

Imports

ws2_32

kernel32

advapi32

shell32

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 9KB - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 9KB - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 4KB - Virtual size: 4KB