b96d0bb669391045fe176f540a81e6ec20347a9644c1ea5c63996d2793e43bea

General

Target

b96d0bb669391045fe176f540a81e6ec20347a9644c1ea5c63996d2793e43bea
Size

188KB
MD5

7b4af5b44134253bc563b3e4eb2298d0
SHA1

ea9955d21449778bde56613a287a5bfb95719cc4
SHA256

b96d0bb669391045fe176f540a81e6ec20347a9644c1ea5c63996d2793e43bea
SHA512

3eb64ce056cdbd043debcb434d088cdba18586e862ec7d73a557a7e0e5d3bf0ede19ce211d825101d68893648681e02fe523ee3959f56c598a874a51814df7b3
SSDEEP

3072:A6bdEyHjKGH0EJrg4/8NwZOaMidf/LqoXdZKWFax4Siz:3JEyHjKG1Jrg4/YwQGf/LTrSe

Score

N/A

Malware Config

Signatures

Files

b96d0bb669391045fe176f540a81e6ec20347a9644c1ea5c63996d2793e43bea
.exe windows x86

ce186344bdbbcc3f2c2503ae52153e33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA

rpcrt4

UuidToStringA

user32

wsprintfA

shlwapi

SHSetValueA
SHEnumKeyExA
SHGetValueA
SHEnumValueA
StrStrIA

advapi32

OpenServiceA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
OpenSCManagerA
DeleteService
RegOpenKeyExA
StartServiceA
CreateServiceA
CloseServiceHandle
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA

ole32

CoInitialize
CoCreateGuid
CoCreateInstance

msvcrt

isspace
isgraph
fwrite
free
isalnum
fopen
sprintf
isalpha
wctomb
__mb_cur_max
isupper
tolower
islower
strerror
ispunct
isdigit
atoi
strncpy
rand
wcscpy
mbstowcs
srand
time
memcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strlen
printf
strcpy
strcat
isxdigit
??2@YAPAXI@Z
malloc
memcpy
memset
fclose

imagehlp

ImageNtHeader

kernel32

ExitProcess
GetVersionExA
GetLocalTime
SleepEx
SetFileTime
GetFileAttributesExA
GetModuleHandleA
lstrlenA
GetSystemDirectoryA
GetLastError
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
CloseHandle
WideCharToMultiByte
GetStartupInfoA
CreateFileA

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ce186344bdbbcc3f2c2503ae52153e33

Headers

File Characteristics

Imports

shell32

rpcrt4

user32

shlwapi

advapi32

ole32

msvcrt

imagehlp

kernel32

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 108KB - Virtual size: 106KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 108KB - Virtual size: 106KB