f462861a822163fa2d289d73bf8a924217fa109bd0486dc6dd3e91a55934ff29

General

Target

f462861a822163fa2d289d73bf8a924217fa109bd0486dc6dd3e91a55934ff29
Size

160KB
MD5

a1fc0b72e7ed850078f602bc38206b20
SHA1

0d142790f1ad9cf2be391d38f57132ac1b99a999
SHA256

f462861a822163fa2d289d73bf8a924217fa109bd0486dc6dd3e91a55934ff29
SHA512

a2dd774efd794d086857f84776caa0422f03be7ac60d41796f6aee6db1d777267e73c1c8a43fc4f275b940f771d0ce390b9a8a796e6e4a50d07358f214fac4cc
SSDEEP

3072:hCo4v0ZAJHRDsnVijA8JHQK0OBDOsK1l90hj:vGXAV8jyWDzol4j

Score

N/A

Malware Config

Signatures

Files

f462861a822163fa2d289d73bf8a924217fa109bd0486dc6dd3e91a55934ff29
.exe windows x86

4088c80e714f5bcdcbb64a1015826346

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CreateFileA
GetVersionExA
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
WinExec
GetProcAddress
GetLastError
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
CloseHandle
Sleep
LoadLibraryA

user32

TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
PostQuitMessage
DispatchMessageA
GetDesktopWindow

advapi32

ConvertSidToStringSidA
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
DeleteService
OpenServiceA
StartServiceA
CreateServiceA
LookupAccountNameA
GetUserNameA
OpenSCManagerA

shlwapi

SHDeleteKeyA
SHSetValueA
StrStrA

msvcrt

_exit
_strlwr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
rand
srand
time
fclose
fflush
fwrite
fopen
_access
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
_except_handler3
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

dbghelp

ImageNtHeader

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4088c80e714f5bcdcbb64a1015826346

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

version

dbghelp

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 100KB - Virtual size: 97KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 100KB - Virtual size: 97KB

.rsrc
Size: 4KB - Virtual size: 1KB