0377555d90d5cf0c8cd17b59c2ece12b9360dc9e56a6bb5636af568f3ddca751

General

Target

0377555d90d5cf0c8cd17b59c2ece12b9360dc9e56a6bb5636af568f3ddca751
Size

137KB
MD5

6df662522a6658897ba6f0008fff5290
SHA1

279fd1183c33f6941811f8d3e97324195cbb4db8
SHA256

0377555d90d5cf0c8cd17b59c2ece12b9360dc9e56a6bb5636af568f3ddca751
SHA512

5783ab6b00336ad3f9fe52a7b3d8845112b0b054fa2447401d593a4f316a2a39a5199a86e60d8e55338744a94659cac3bcb3384104a8a34ab97b65968322d972
SSDEEP

3072:ZxG5s5nGwwrsq/fgawuVhFgVYmAj6bMlyfpiKHTA:ZxGuxGw0JHga4VYmA2bnRiK

Score

N/A

Malware Config

Signatures

Files

0377555d90d5cf0c8cd17b59c2ece12b9360dc9e56a6bb5636af568f3ddca751
.exe windows x86

b86c97b0694705d796c7e2dfcbc3955c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DeregisterEventSource
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegisterEventSourceW
RegisterServiceCtrlHandlerW
ReportEventW
SetServiceStatus
StartServiceCtrlDispatcherW

winmm

timeKillEvent
timeSetEvent

user32

wsprintfA
wsprintfW

kernel32

WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
CloseHandle
ConnectNamedPipe
ConvertFiberToThread
CreateEventW
CreateFileA
CreateThread
DebugBreakProcess
DeviceIoControl
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemTime
GetVersion
GetVersionExA
HeapCreate
HeapDestroy
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueueUserWorkItem
ReleaseSemaphore
RtlUnwind
SetCommConfig
SetEvent
SetHandleCount
SetLastError
SetNamedPipeHandleState
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b86c97b0694705d796c7e2dfcbc3955c

Headers

File Characteristics

Imports

advapi32

winmm

user32

kernel32

Sections

.text Size: 97KB - Virtual size: 96KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 19KB - Virtual size: 19KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 97KB - Virtual size: 96KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 15KB - Virtual size: 15KB