trusted_sites[.]exe

General

Target

trusted_sites.exe
Size

64KB
MD5

c271584a34ecc00e936b25a4dbad910a
SHA1

bc456c14389161409b4734f39a676f2c129db44a
SHA256

7b1b631a74b5b386af4c25a42902e4314963e26c94f513cfbf0e854bf1b3d5be
SHA512

c8f70de48645091fa274330e07c50ec63b66d94b71bc2934f556e1489a29044b150b9fb0cdd8515751dd1604f381c1e30878e9ff4ca32240ffff6fcd096cdbd2
SSDEEP

768:mYVawgryvRK3WMzNW2+kPNl6J3Oei5iODZOCVNiL2030GDocvGD:mYVa7jmMN+WNl6hO9LwCb8Z3/occ

Score

N/A

Malware Config

Signatures

Files

trusted_sites.exe
.exe windows x86

d8684c5e06353beaefcba60475396ef4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitNamedPipeA
CreateFileA
CloseHandle
ConnectNamedPipe
ReadFile
WriteFile
DisconnectNamedPipe
LocalAlloc
CreateNamedPipeA
ReleaseMutex
FormatMessageA
lstrlenA
LocalFree
GetLastError
Sleep
GetModuleFileNameA
OpenMutexA
WaitForSingleObject
CreateMutexA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetFileAttributesA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetExitCodeProcess
CreateProcessA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
LCMapStringW

advapi32

CloseServiceHandle
RegQueryInfoKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
SetServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenServiceA
ControlService
QueryServiceStatus
DeleteService
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
CreateServiceA
OpenSCManagerA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8684c5e06353beaefcba60475396ef4

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 984B

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 984B