3b8555558ad21b0ec0267269bf66bcfb9100faf2e464f52dcb3cddb79fb10fd4

General

Target

3b8555558ad21b0ec0267269bf66bcfb9100faf2e464f52dcb3cddb79fb10fd4
Size

12KB
MD5

68055bfc758b98222e146c9a33eba720
SHA1

a970f266dda21c3c38d12a2cfc908233107f51a8
SHA256

3b8555558ad21b0ec0267269bf66bcfb9100faf2e464f52dcb3cddb79fb10fd4
SHA512

46ba0ebd4ee37cee9df70cdcc792a5b1f8504723f400d82d11a362b0c7128352dfc8748e13d954cf78783df61ffb2cc7da2266e442024af4a408567c577e333d
SSDEEP

192:GWymaZGMPZ1t4XRGuqwOdr7+M1WnyZVP0dNpaJ1dp:ryLAMR1OMuWpTWSP0dYr

Score

N/A

Malware Config

Signatures

Files

3b8555558ad21b0ec0267269bf66bcfb9100faf2e464f52dcb3cddb79fb10fd4
.dll windows x64

6de2411b59f4a68b4bd981c1d05d056f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
VirtualFree
VirtualAlloc
GetSystemInfo
IsBadReadPtr
SetLastError
GetCurrentProcessId
ReadFile
CloseHandle
GetFileSize
CreateFileA
GetModuleFileNameA
lstrcpyA
WaitForSingleObject
CreateThread
OpenMutexA
_local_unwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
__C_specific_handler
Sleep
GetVersion

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerA

msvcrt

strcmp
memset
memmove
memcpy
free
malloc
strcat
strcpy
strlen
sprintf
_splitpath
wcstombs
strncpy
_initterm

Exports

Exports

ServiceMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6de2411b59f4a68b4bd981c1d05d056f

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 512B - Virtual size: 168B

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 512B - Virtual size: 72B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 512B - Virtual size: 168B

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 512B - Virtual size: 72B