E:\Conding\xmrig\back\Monero_Loader\Release\xmrig.pdb
General
-
Target
yk.exe
-
Size
1.1MB
-
MD5
bb73060a44e8fb34f92dd1815c6a300f
-
SHA1
ab65f6880b9dddda7af5d2289f4858f48b8162d4
-
SHA256
c1f0d4cc18f34c9f111d74da644c3e21827a01f5e862deb667e9e18ee8e7258d
-
SHA512
91be2ab84f17cc907c057c75c8dd9ccc0914aecadd19c390a7edce9efa21936fbc450d6267eb17af8213afd15daa4d12f0b10658d55a6a38232c9cc327409146
-
SSDEEP
24576:+31SZSaMidm23AzTOAV4xhFIaSV5VZZGSDNVwftoJNDBki+4K4zI4VX9ImOfj:+wZSTidmvuAGhFA54qVwfoNDBkirJzIP
Malware Config
Signatures
Files
-
yk.exe.exe windows:5 windows x86 arch:x86
f029615e3ff5f1b5bc405d8fef0a66e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryW
CopyFileW
TerminateProcess
FileTimeToSystemTime
GetModuleFileNameW
GetTempPathW
GetProcAddress
VirtualAllocEx
Process32FirstW
GetModuleFileNameA
Process32NextW
CreateToolhelp32Snapshot
GetCurrentProcessId
GetSystemTime
WriteProcessMemory
CreateThread
SetPriorityClass
GetCurrentProcess
GetLogicalDriveStringsW
GetSystemDirectoryW
GetCurrentThread
lstrcatA
GetEnvironmentVariableA
MultiByteToWideChar
lstrlenW
SetThreadPriority
GetShortPathNameA
GetLocalTime
QueryDosDeviceW
lstrcmpiW
lstrcatW
GetFileTime
WinExec
DeleteFileW
lstrcpyW
lstrcpyA
InterlockedIncrement
GetStdHandle
SetHandleCount
LocalFree
CreateRemoteThread
GetModuleHandleW
OutputDebugStringW
WaitForSingleObject
CreateDirectoryW
HeapFree
InterlockedDecrement
GetSystemTimeAsFileTime
CreateMutexW
GetCommandLineW
GetLastError
CreateFileW
ReadFile
WideCharToMultiByte
WriteFile
CreateProcessW
CloseHandle
GetSystemInfo
GetExitCodeProcess
Sleep
OpenProcess
GetTickCount
lstrlenA
SetStdHandle
WriteConsoleW
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
FlushFileBuffers
SetFilePointer
HeapReAlloc
GetStringTypeW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
GetFileType
EncodePointer
DecodePointer
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetFileAttributesW
ExitProcess
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringW
InitializeCriticalSectionAndSpinCount
user32
wsprintfA
wsprintfW
advapi32
AdjustTokenPrivileges
QueryServiceConfigW
ControlService
UnlockServiceDatabase
RegOpenKeyExW
QueryServiceStatusEx
QueryServiceStatus
StartServiceW
ChangeServiceConfig2W
LockServiceDatabase
RegOpenKeyW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
CreateServiceW
LookupPrivilegeValueW
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegCloseKey
RegisterServiceCtrlHandlerW
SetServiceStatus
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyExW
StartServiceCtrlDispatcherW
shell32
SHGetSpecialFolderPathW
ole32
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
oleaut32
VariantChangeType
VariantInit
SysAllocString
SysFreeString
VariantClear
winhttp
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpConnect
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpReadData
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpOpen
WinHttpQueryDataAvailable
ws2_32
closesocket
socket
WSACleanup
sendto
htons
WSAStartup
recvfrom
inet_addr
psapi
GetProcessImageFileNameW
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 965KB - Virtual size: 974KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ