77a81f35784bdce1a8b9288a0d44a282a54675566035480da44bb24c89121de7

General

Target

77a81f35784bdce1a8b9288a0d44a282a54675566035480da44bb24c89121de7
Size

192KB
MD5

6dd9cffbcf8bf175163b8132373025d0
SHA1

68ef7aac041d7fd6dc62773eb3db25bfc7c1ca9f
SHA256

77a81f35784bdce1a8b9288a0d44a282a54675566035480da44bb24c89121de7
SHA512

373f696f2458326d94e1b374e84f01da74fb30519d5a633524043e9e94e3ee0d5d6b476bdf8012752001b6f63ddd62171ef1bd32ccd421aa1d3a039d7cd25511
SSDEEP

6144:cwYKZgYvfA6dmnwq2nh0gqhtoG8YJle/s:ljZgYXz2wr058Oj

Score

N/A

Malware Config

Signatures

Files

77a81f35784bdce1a8b9288a0d44a282a54675566035480da44bb24c89121de7
.exe windows x86

cd76d021c6c4f27b377f7f96ad2fde14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
CoInitialize
CoCreateInstance

shlwapi

StrStrIA
SHSetValueA
SHEnumKeyExA
SHGetValueA
SHEnumValueA

rpcrt4

UuidToStringA

advapi32

CreateServiceA
CryptReleaseContext
OpenSCManagerA
DeleteService
OpenServiceA
StartServiceA
CryptGenRandom
CloseServiceHandle
RegOpenKeyExA
CryptAcquireContextA
RegCloseKey
RegSetValueExA
RegCreateKeyExA

user32

wsprintfA

shell32

SHGetSpecialFolderPathA

msvcrt

rand
fclose
fwrite
fopen
strlen
sprintf
tolower
strcpy
ispunct
??2@YAPAXI@Z
printf
wctomb
__mb_cur_max
isspace
strerror
isupper
isgraph
isxdigit
isalpha
islower
isdigit
atoi
strncpy
wcscpy
mbstowcs
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcat
time
memcmp
malloc
free
memset
memcpy
isalnum

imagehlp

ImageNtHeader

kernel32

GetPrivateProfileStringA
GetFileAttributesA
FindFirstFileA
GetLastError
ExitProcess
GetVersionExA
GetLocalTime
SleepEx
GetModuleHandleA
FindNextFileA
WideCharToMultiByte
lstrlenA
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
GetStartupInfoA

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd76d021c6c4f27b377f7f96ad2fde14

Headers

File Characteristics

Imports

ole32

shlwapi

rpcrt4

advapi32

user32

shell32

msvcrt

imagehlp

kernel32

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 112KB - Virtual size: 109KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 112KB - Virtual size: 109KB