ef58eb2a3b6f70098b0a6f37e54bce9665667ae22ac8aa69ebdf16b4d781eaaf

General

Target

ef58eb2a3b6f70098b0a6f37e54bce9665667ae22ac8aa69ebdf16b4d781eaaf
Size

28KB
MD5

ffd4b55598e99bf94b7a0781c69094a6
SHA1

3cd0326437fa2417c3bbe8dd33942fe4bcaca6c2
SHA256

ef58eb2a3b6f70098b0a6f37e54bce9665667ae22ac8aa69ebdf16b4d781eaaf
SHA512

98d5a17a3a6346ee97738b57366f5d8737bdbc8bd4ff3f330e4d8b1bc4884a57ffe8410f6b9081c818377c8a016151164de8279f8e091dc5dc08cca93e395fa0
SSDEEP

384:ksjdnjeHLE+7yxrAqpls/8SdxIeK6Xsc2J4Xulk52EsMriPfI7:tJjkLE+n3HxIfxc2JEN52ERri47

Score

N/A

Malware Config

Signatures

Files

ef58eb2a3b6f70098b0a6f37e54bce9665667ae22ac8aa69ebdf16b4d781eaaf
.exe windows x86

3dbde40bb845956779635af061ab7e72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
FindFirstFileA
GetVolumeInformationA
DeleteFileA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
CopyFileA
CreateEventA
WriteFile
GetStartupInfoA
GetModuleHandleA
CreateFileMappingA
FreeLibrary
CloseHandle
CreateProcessA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetLastError
GetVersion
GetCommandLineA
Sleep
SetFileTime
GetFileTime
CreateFileA
GetShortPathNameA
FindClose
ReadFile
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
WaitForSingleObject
OpenEventA
GetEnvironmentVariableA
GetCurrentProcessId

advapi32

RegEnumValueA
RegSetValueExA
RegCreateKeyExA
ChangeServiceConfigA
OpenServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
StartServiceA
ControlService
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
SetServiceStatus
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA

mfc42

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_mbscmp
strncpy
_strlwr
free
malloc
srand
time
__CxxFrameHandler
sprintf
rand
_strnicmp

shell32

SHGetSpecialFolderPathA

shlwapi

SHDeleteKeyA
PathFileExistsA
PathFindFileNameA

Sections

WIN0
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3dbde40bb845956779635af061ab7e72

Headers

File Characteristics

Imports

kernel32

advapi32

mfc42

msvcrt

shell32

shlwapi

Sections

WIN0 Size: 24KB - Virtual size: 24KB

.avp Size: 2KB - Virtual size: 4KB

WIN0
Size: 24KB - Virtual size: 24KB

.avp
Size: 2KB - Virtual size: 4KB