1976e6359fff52a49076c45e17f9574d6b9d8507af6863342996012e364537b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1976e6359fff52a49076c45e17f9574d6b9d8507af6863342996012e364537b3
Size

139KB
MD5

81bd9388495fb40d7e6e96bcae243ef8
SHA1

10352267cb1d83fe53ca9262c15a4be0cbd9bb87
SHA256

1976e6359fff52a49076c45e17f9574d6b9d8507af6863342996012e364537b3
SHA512

bd532198579e284a06cc3de646a2905ab1a570337483d97f4c65d566c65291bfb74bc10b8bad953b6550897215c0e742fa2e2803d4d278615957d0e1890c300c
SSDEEP

3072:Wl8oqqj/tiR1YOWDYsy5L/rNDmGTVo0qdTBfVly+KWEvzmY:WlC6iPdZmGTudTBtly+KWEvSY

Score

N/A

Malware Config

Signatures

Files

1976e6359fff52a49076c45e17f9574d6b9d8507af6863342996012e364537b3
.exe windows x86

ce7b2ba5ca6f0a7963632d795181a2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapReAlloc
HeapFree
lstrlenA
HeapAlloc
WritePrivateProfileStringA
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
GetSystemTimeAsFileTime
CloseHandle

user32

wvsprintfA

advapi32

CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE