d63788bb2296af8a90e9e3c35c71bfa70c5e4d345b8c3875d81dd01a47d1c387

Sharing

Copy URL

Twitter E-mail

General

Target

d63788bb2296af8a90e9e3c35c71bfa70c5e4d345b8c3875d81dd01a47d1c387
Size

453KB
MD5

fb7332c7f277ba381838782896d82d89
SHA1

26ec66626c1b7f0d52ba25a7c23a499949833029
SHA256

d63788bb2296af8a90e9e3c35c71bfa70c5e4d345b8c3875d81dd01a47d1c387
SHA512

8660c2d4a6ff5df74440733fa303c41614ac9451a0fcde6d72939d8b528e7ac6cc8176baa9d41f4b6eb5f3aeed91f0f6a3831dd29cc0f86cb82be1fd931cad31
SSDEEP

12288:x+JuRqc8hCjaXqs8MfEud+mQQw+IQqJvD7Dg1eXsc+hl:x+JuR9s4s8QEuKp+Irvc14scQ

Score

N/A

Malware Config

Signatures

Files

d63788bb2296af8a90e9e3c35c71bfa70c5e4d345b8c3875d81dd01a47d1c387
.exe windows x86

8267383707659cf29714516f41a17bef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
InitializeSecurityDescriptor
CopySid
GetLengthSid
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegDeleteKeyW
RegEnumKeyExW
LsaOpenPolicy
LsaLookupNames
GetSidSubAuthorityCount
GetSidSubAuthority
LsaFreeMemory
LsaOpenAccount
LsaCreateAccount
LsaGetSystemAccessAccount
LsaSetSystemAccessAccount
LsaClose
GetSecurityDescriptorLength

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fhj5
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fhj50
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fhj51
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fhj52
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fhj53
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fhj54
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fhj55
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fhj56
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fhj57
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fhj58
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fhj59
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1231
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JAKS
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GAHS
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HAJS
Size: 512B - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HnJS
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SKALS
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SKAkS
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SfAkS
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.8AUqj
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8267383707659cf29714516f41a17bef

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 2KB - Virtual size: 2KB

.fhj5 Size: 512B - Virtual size: 196B

.fhj50 Size: 512B - Virtual size: 222B

.fhj51 Size: 512B - Virtual size: 228B

.fhj52 Size: 205KB - Virtual size: 204KB

.fhj53 Size: 205KB - Virtual size: 204KB

.fhj54 Size: 512B - Virtual size: 212B

.fhj55 Size: 512B - Virtual size: 214B

.fhj56 Size: 512B - Virtual size: 216B

.fhj57 Size: 512B - Virtual size: 214B

.fhj58 Size: 512B - Virtual size: 212B

.fhj59 Size: 512B - Virtual size: 212B

.1231 Size: 512B - Virtual size: 214B

.JAKS Size: 512B - Virtual size: 246B

.GAHS Size: 512B - Virtual size: 198B

.HAJS Size: 512B - Virtual size: 458B

.HnJS Size: 512B - Virtual size: 168B

.SKALS Size: 512B - Virtual size: 242B

.SKAkS Size: 512B - Virtual size: 260B

.SfAkS Size: 512B - Virtual size: 260B

.8AUqj Size: 512B - Virtual size: 160B

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 328B

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 2KB - Virtual size: 2KB

.fhj5
Size: 512B - Virtual size: 196B

.fhj50
Size: 512B - Virtual size: 222B

.fhj51
Size: 512B - Virtual size: 228B

.fhj52
Size: 205KB - Virtual size: 204KB

.fhj53
Size: 205KB - Virtual size: 204KB

.fhj54
Size: 512B - Virtual size: 212B

.fhj55
Size: 512B - Virtual size: 214B

.fhj56
Size: 512B - Virtual size: 216B

.fhj57
Size: 512B - Virtual size: 214B

.fhj58
Size: 512B - Virtual size: 212B

.fhj59
Size: 512B - Virtual size: 212B

.1231
Size: 512B - Virtual size: 214B

.JAKS
Size: 512B - Virtual size: 246B

.GAHS
Size: 512B - Virtual size: 198B

.HAJS
Size: 512B - Virtual size: 458B

.HnJS
Size: 512B - Virtual size: 168B

.SKALS
Size: 512B - Virtual size: 242B

.SKAkS
Size: 512B - Virtual size: 260B

.SfAkS
Size: 512B - Virtual size: 260B

.8AUqj
Size: 512B - Virtual size: 160B

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 328B