af31e882c94d90660dc7f3bde3ea04581672261a23502ff3e58170fb8d4cbb95

Sharing

Copy URL Twitter E-mail

General

Target

af31e882c94d90660dc7f3bde3ea04581672261a23502ff3e58170fb8d4cbb95
Size

160KB
MD5

4be048ed38a36c238944d70947e06380
SHA1

2f33cdaef1285d3ae22aa035e0fdcdf37d4c0094
SHA256

af31e882c94d90660dc7f3bde3ea04581672261a23502ff3e58170fb8d4cbb95
SHA512

ab4a79e94e7c5634a6486c2c6fd7aca15cb572443608345317b3830f5157a0c7dd140d1922fb6bc39ec52cb0e3b0099ac225ec3dc94d2db32ec45fbd0996a9a5
SSDEEP

3072:3MENWLu7kygOg22nm8xyuUs3fFDvN9MsKuRyYWwXv:M0kq2FwcW0v

Score

N/A

Malware Config

Signatures

Files

af31e882c94d90660dc7f3bde3ea04581672261a23502ff3e58170fb8d4cbb95
.exe windows x86

eb6fdca4bf50ec1dc812e98c1c2f519a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetSystemDirectoryA
GetShortPathNameA
FindNextFileA
DeleteFileA
CreateFileA
GetWindowsDirectoryA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
WriteFile
ReadFile
GetCurrentProcess
FindFirstFileA
FindClose
GetVersion
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesA
Sleep
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
ExitProcess
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapFree
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
VirtualAlloc
HeapReAlloc
SetEndOfFile

user32

LoadStringA
MessageBoxA
ExitWindowsEx

advapi32

OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

shell32

SHFileOperationA

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eb6fdca4bf50ec1dc812e98c1c2f519a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 56KB - Virtual size: 55KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 56KB - Virtual size: 55KB

.rmnet
Size: 60KB - Virtual size: 60KB