0e646c9846339e77b67029f648aa94c6b39e7728cc8354227fee7838c68e82ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e646c9846339e77b67029f648aa94c6b39e7728cc8354227fee7838c68e82ee
Size

104KB
MD5

4b0587d7767940850ad8fc879f8c3879
SHA1

9a03d4588000529bb96f24fbbef7d68d73e8da3f
SHA256

0e646c9846339e77b67029f648aa94c6b39e7728cc8354227fee7838c68e82ee
SHA512

55eb60fbc94efe4e6dae84bcf05c508e884802cbe5360f918c7eaf76bdae419b80369eca55ca923e5a20c09acc2ea9feb3060ccd87acc6da8f5c6086d3f23e86
SSDEEP

3072:QBuZKurb1YAIQx+0pSjmSr/I0aZp2J4nZhy:QUO+xlugn

Score

N/A

Malware Config

Signatures

Files

0e646c9846339e77b67029f648aa94c6b39e7728cc8354227fee7838c68e82ee
.exe windows x86

66b5c4b686cf5384fe4770db4afb8fbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetLastError
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle

advapi32

ControlService
CloseServiceHandle
OpenSCManagerA
DeleteService
OpenServiceA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ