470fbcb927f7288d48544f55e577569497f2499a8e81a168b9258565362778f4

General

Target

470fbcb927f7288d48544f55e577569497f2499a8e81a168b9258565362778f4
Size

308KB
MD5

d1b6002c578d38925a0528b2ff9dd596
SHA1

98b84d3d221802863239054403901c94104a91a2
SHA256

470fbcb927f7288d48544f55e577569497f2499a8e81a168b9258565362778f4
SHA512

2e1efecfce2d4d09bf7167c1b54aa97b87ca95cf2edbe4fc39bd5cc7947dd0bff020d11d9b81f4a0a868d057c2914d3d31cdc2a8a5ae70f83ade2fab54e5056c
SSDEEP

6144:9o7fge2XZ5X6ddChFMxzowpGAYOV8vIhsH8w6awmg8lZ7sVa4/VAaj6G:9Yb2XZ56d01A+Qdqwmg8boVa4Zj

Score

N/A

Malware Config

Signatures

Files

470fbcb927f7288d48544f55e577569497f2499a8e81a168b9258565362778f4
.exe windows x86

8096eacb2f25d9428919c71d4938ccbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FormatMessageW
SetFileTime
GetStartupInfoW
IsBadWritePtr
HeapCreate
SetFileTime
FindResourceW
ReadFile
GetFileSize
GetLastError
CloseHandle
CreatePipe
LoadLibraryA
GetModuleHandleA
InitializeCriticalSection
GetExitCodeProcess
lstrcpyA
CreateMutexW
SetFileTime
lstrcatA
LeaveCriticalSection

mstscax

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

advapi32

IsValidAcl
RegEnumKeyA
InitializeSid
CreateProcessAsUserA
ControlService
IsValidSid
RegQueryValueW
RegCreateKeyExW
IsValidSecurityDescriptor
IsTextUnicode
ClearEventLogW
CreateServiceW
RegDeleteValueA

rasapi32

DwRasUninitialize

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rich
Size: 1KB - Virtual size: 176B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ole
Size: 512B - Virtual size: 112B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8096eacb2f25d9428919c71d4938ccbc

Headers

File Characteristics

Imports

kernel32

mstscax

advapi32

rasapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rich Size: 1KB - Virtual size: 176B

.RSRC Size: 293KB - Virtual size: 293KB

.ole Size: 512B - Virtual size: 112B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rich
Size: 1KB - Virtual size: 176B

.RSRC
Size: 293KB - Virtual size: 293KB

.ole
Size: 512B - Virtual size: 112B