68a157b915ae1b8d400219ff8521aa0d23eeefb57a008b47af840e4997723a37

General

Target

68a157b915ae1b8d400219ff8521aa0d23eeefb57a008b47af840e4997723a37
Size

91KB
MD5

80fdba52141e8da87f12063406aaf19d
SHA1

7efc2d4afba9ab13868f4c749ed8aa749e76500c
SHA256

68a157b915ae1b8d400219ff8521aa0d23eeefb57a008b47af840e4997723a37
SHA512

114645365c2eac252a1ead5822022999ee6ec675e8b7c152086d12261912a0f77dea07b63ccc9383fa93e0a18a53a5d1a758c4eaad364becd118ed0414d88400
SSDEEP

1536:+l5VKkuW+W/4AdDl6OSnWJZkbO7usnG2CAuDHuBe/cb0+QkHaeQ:+nVKkuW7gAdDl6OSCWO6N2CAuDT/HZp

Score

N/A

Malware Config

Signatures

Files

68a157b915ae1b8d400219ff8521aa0d23eeefb57a008b47af840e4997723a37
.exe windows x86

e206a5499fa29af0ec1b23f008ea51f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyW
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
DeleteService
OpenServiceW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW

ntdll

RtlUnwind
_wcsicmp
_snwprintf
wcsncpy
wcschr
wcscpy
wcsrchr
NtQuerySystemInformation
sprintf
_vsnprintf
NtQueryVirtualMemory

setupapi

SetupCloseInfFile
SetupGetLineTextW
SetupFindFirstLineW
SetupOpenInfFileW
SetupFindNextLine

msvcrt

_initterm
__wgetmainargs
exit
_controlfp
_XcptFilter
_exit
_c_exit
free
malloc
wprintf
printf
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_cexit
__setusermatherr
__winitenv

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DeleteFileW
GetVersionExW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetFileAttributesW
GetModuleFileNameW
FlushFileBuffers
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
CreateFileA
SetFilePointer
GetLocalTime
GetLastError
GetTickCount
WriteFile
SetLastError

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e206a5499fa29af0ec1b23f008ea51f7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ntdll

setupapi

msvcrt

kernel32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 69KB - Virtual size: 72KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 69KB - Virtual size: 72KB