de910ae47b881b6e85b629d22ebc382b289eb63c1b07ec769476b6d9559821d1

General

Target

de910ae47b881b6e85b629d22ebc382b289eb63c1b07ec769476b6d9559821d1
Size

23KB
MD5

75aa4304975d1aa777549e0ed6435f80
SHA1

1f908f180f42a94f98a2b5c7b7b0842b2d02febc
SHA256

de910ae47b881b6e85b629d22ebc382b289eb63c1b07ec769476b6d9559821d1
SHA512

fc350863d047ae4a6069f84c72dfe01288ed10be831f806a3023cac0eacfc3de9f9bae8e827e0cabcf139826271d0357f407ded77f3aa36e471262d3924925c8
SSDEEP

384:6rlnEjbWreEATVRPwzOeoB8uNQoN98O4lwaWjBWBds28IcM4aeW:mlnEbWrcTAoX/7ulwP6dszbae

Score

N/A

Malware Config

Signatures

Files

de910ae47b881b6e85b629d22ebc382b289eb63c1b07ec769476b6d9559821d1
.exe windows x86

e206a5499fa29af0ec1b23f008ea51f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyW
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
DeleteService
OpenServiceW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW

ntdll

RtlUnwind
_wcsicmp
_snwprintf
wcsncpy
wcschr
wcscpy
wcsrchr
NtQuerySystemInformation
sprintf
_vsnprintf
NtQueryVirtualMemory

setupapi

SetupCloseInfFile
SetupGetLineTextW
SetupFindFirstLineW
SetupOpenInfFileW
SetupFindNextLine

msvcrt

_initterm
__wgetmainargs
exit
_controlfp
_XcptFilter
_exit
_c_exit
free
malloc
wprintf
printf
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_cexit
__setusermatherr
__winitenv

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DeleteFileW
GetVersionExW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetFileAttributesW
GetModuleFileNameW
FlushFileBuffers
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
CreateFileA
SetFilePointer
GetLocalTime
GetLastError
GetTickCount
WriteFile
SetLastError

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e206a5499fa29af0ec1b23f008ea51f7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ntdll

setupapi

msvcrt

kernel32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 3KB