4faa6a23bb5bd32401ba2663d2f74258ad345051590117806234f4666d57b938

General

Target

4faa6a23bb5bd32401ba2663d2f74258ad345051590117806234f4666d57b938
Size

801KB
MD5

6e566c37f04d0410c7e2501616aa081b
SHA1

fadb1b3cb0f7768b8505652b07b4538eccb07dc1
SHA256

4faa6a23bb5bd32401ba2663d2f74258ad345051590117806234f4666d57b938
SHA512

49a260317efa835627c40c888d72fff5436505b5d43d526d6801f0774c5a97adf43600adc8cf5cbec2752cf63a483aedf7f4111323602164d74d7e4ea4c66186
SSDEEP

24576:FemWTL9c2h+Dhh5+hEugTG86U2Hj/ohTh3:YDTL6hhgRzTKTR

Score

N/A

Malware Config

Signatures

Files

4faa6a23bb5bd32401ba2663d2f74258ad345051590117806234f4666d57b938
.exe windows x86

7ef32b8c70f2e88a02d20e1d96164ea7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapSize
SetFileTime
GetStartupInfoW
GetModuleHandleA
CreateEventA
IsBadWritePtr
LoadLibraryA
GetFileSize
GetLastError
InitializeCriticalSection
lstrcatA
FormatMessageW
CloseHandle
SetFileTime
LeaveCriticalSection
GetExitCodeProcess
InterlockedExchange
ReadFile
HeapCreate
SetFileTime
lstrcpyA

mstscax

DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer

advapi32

IsValidSecurityDescriptor
InitializeSid
RegCreateKeyExW
IsValidAcl
RegDeleteValueA
IsValidSid
ClearEventLogW
RegEnumKeyA
CreateProcessAsUserA
RegQueryValueW
IsTextUnicode
ControlService
CreateServiceW

rasapi32

DwRasUninitialize

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 728KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rich
Size: 1KB - Virtual size: 176B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 787KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ole
Size: 512B - Virtual size: 112B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7ef32b8c70f2e88a02d20e1d96164ea7

Headers

File Characteristics

Imports

kernel32

mstscax

advapi32

rasapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 728KB

.data Size: 4KB - Virtual size: 3KB

.rich Size: 1KB - Virtual size: 176B

.RSRC Size: 787KB - Virtual size: 1.5MB

.ole Size: 512B - Virtual size: 112B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 728KB

.data
Size: 4KB - Virtual size: 3KB

.rich
Size: 1KB - Virtual size: 176B

.RSRC
Size: 787KB - Virtual size: 1.5MB

.ole
Size: 512B - Virtual size: 112B