f325b026ad63b0a553ab522be03b0a903c3b59976675bbd60d93148975e4d506

General

Target

f325b026ad63b0a553ab522be03b0a903c3b59976675bbd60d93148975e4d506
Size

16KB
MD5

2fffff9bdaac33233da5b6a1a9fa8d15
SHA1

33df409e4f037082a0027fd44e2fb8f5eccbe383
SHA256

f325b026ad63b0a553ab522be03b0a903c3b59976675bbd60d93148975e4d506
SHA512

70f41af7bc03ddf1fe9dc0bc44fb5d35311f2f0af928555f89021eb8664fdca4052f75e7dda3356311c307b0ee04895509896b39d0edcf5d6dee568899755119
SSDEEP

384:6v+pvlR4BZRpO9GN7cjce5tGRThi5Y1IfNWSF4ifW:6v+pvlRoXO9oWH5MRThi+IfjJ

Score

N/A

Malware Config

Signatures

Files

f325b026ad63b0a553ab522be03b0a903c3b59976675bbd60d93148975e4d506
.exe windows x86

4abcbef9cd933c1554dbc0dd1e248c7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
SetKernelObjectSecurity
GetAce
RegDeleteKeyA
ControlService
SetTokenInformation
IsValidSid
QueryServiceConfigA
QueryServiceObjectSecurity
LookupPrivilegeValueA
MapGenericMask
RegOpenKeyExA

gdi32

GetObjectA
SetBkMode
CreatePen
CreateDIBSection
StartPage
RestoreDC
DeleteObject
SelectObject
LineTo
SetTextAlign
SelectClipRgn
GetTextMetricsA

msvcrt

_isctype
_waccess
strcspn
_itow
wcsncpy
_XcptFilter
wcsncat
sprintf
_wcsnicmp
_splitpath
strncpy
_beginthread

kernel32

GetExitCodeThread
GetStringTypeA
GetFileTime
SearchPathA
SetEndOfFile
CreateThread
ResumeThread
MultiByteToWideChar
DuplicateHandle
WaitForMultipleObjects
MapViewOfFile
CreateFileA
GetConsoleOutputCP
EnumSystemLocalesA
LocalFree
lstrcatA
GetLocaleInfoA
lstrcpyA

user32

GetDlgItem
PeekMessageA
DefDlgProcA
SendMessageTimeoutA
GetSysColor
SetWindowTextA
MessageBoxA
GetWindowTextA
EnableMenuItem
GetWindowPlacement
CreateIconIndirect

ole32

OleGetIconOfClass
CoResumeClassObjects
CoGetMalloc
CoGetTreatAsClass
CoMarshalInterThreadInterfaceInStream
CoGetStdMarshalEx
CoFreeLibrary
CoFileTimeToDosDateTime

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4abcbef9cd933c1554dbc0dd1e248c7e

Headers

File Characteristics

Imports

advapi32

gdi32

msvcrt

kernel32

user32

ole32

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 960B

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 960B