685fb8756f72b317bc735b005930c9d9779eb5bc01570ea4e89a0efe5727d444

Sharing

Copy URL Twitter E-mail

General

Target

685fb8756f72b317bc735b005930c9d9779eb5bc01570ea4e89a0efe5727d444
Size

892KB
MD5

a92f0de4bb48ac50193a7b11747d89b1
SHA1

fa8b586f3967df4c8a0454dc9eaab8df55fcb121
SHA256

685fb8756f72b317bc735b005930c9d9779eb5bc01570ea4e89a0efe5727d444
SHA512

f4dabeb1bff63e7e266d43c697abb3fe3d709b7059c326173002fcef3db5edf0120ccc90b6a465b31d1e89344219f7ed0b8ac60ce5a488ac078b4a375c71d279
SSDEEP

12288:Gdov6vwfmFJ0/QdyrEwpv6qKoT/ThUZSpKDfuyrKImfanai+7hb4g41UHn5/:THfmF7yXtnrTdESpKzmf3i++1UZ

Score

N/A

Malware Config

Signatures

Files

685fb8756f72b317bc735b005930c9d9779eb5bc01570ea4e89a0efe5727d444
.exe windows x86

0ba6e939551418daea006b4c466d3693

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

DsGetSiteNameW
NetGroupEnum
NetServiceControl
NetServiceInstall
NetErrorLogWrite
NetServiceEnum
NetLocalGroupDelMembers

kernel32

WriteProcessMemory
ScrollConsoleScreenBufferA
OpenFileMappingW
WriteFileGather
VirtualProtect
FoldStringA
VirtualAlloc
ReleaseSemaphore
UnregisterWait
GetConsoleFontSize
GetFileAttributesExW
SetEnvironmentVariableW
WaitForSingleObject
FlushFileBuffers
ResumeThread

advapi32

GetSidSubAuthority
SetServiceObjectSecurity
CryptSignHashA
SetKernelObjectSecurity
GetSecurityDescriptorDacl
GetSidSubAuthorityCount
LockServiceDatabase
BuildSecurityDescriptorW
RegLoadKeyW
ConvertStringSidToSidW
EnumDependentServicesA
SetSecurityDescriptorSacl
ControlService
AddAccessAllowedAce
RegConnectRegistryW
CreateProcessWithLogonW
WmiDevInstToInstanceNameW
GetSidIdentifierAuthority

msvcrt

_mbsupr
isalpha
fread
_wasctime
_access
_strncoll
_wfindfirst64
strerror

mprapi

MprAdminBufferFree
MprConfigInterfaceDelete
MprConfigTransportSetInfo
MprAdminInterfaceTransportAdd
MprConfigTransportGetHandle
MprConfigInterfaceTransportAdd
MprAdminMIBEntryGetFirst
MprAdminInterfaceEnum

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.jj
Size: 676KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ba6e939551418daea006b4c466d3693

Headers

DLL Characteristics

File Characteristics

Imports

netapi32

kernel32

advapi32

msvcrt

mprapi

Sections

.text Size: 73KB - Virtual size: 73KB

.jj Size: 676KB - Virtual size: 1.1MB

.rsrc Size: 140KB - Virtual size: 140KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 73KB - Virtual size: 73KB

.jj
Size: 676KB - Virtual size: 1.1MB

.rsrc
Size: 140KB - Virtual size: 140KB

.reloc
Size: 1KB - Virtual size: 1KB