53af25e655f19fd136d6fac827167a637f6299df84719247a8aff7cd1586be92

General

Target

53af25e655f19fd136d6fac827167a637f6299df84719247a8aff7cd1586be92
Size

15KB
MD5

809e0dd6454a4c85211af63e7b6e40da
SHA1

5984ac8496501f0593350fafa60d7e97500dec49
SHA256

53af25e655f19fd136d6fac827167a637f6299df84719247a8aff7cd1586be92
SHA512

5d478aecdd2c114221bc11ffaaabf4a6fc880881bb049bb92c4b8f8b546a0d17b2cd4fa5c93a190cebee6850ce95a0059230235ef901379bf838af098d63a206
SSDEEP

192:cCC8/VVijv36sSDHXu/PWlUlDkyNZmmiXy6yUAuzzIIAWS9yk8Ncz:tJ/VVijNSmPDREmilAu3AWgydQ

Score

N/A

Malware Config

Signatures

Files

53af25e655f19fd136d6fac827167a637f6299df84719247a8aff7cd1586be92
.exe windows x86

1995015fd3bae92cad4bf4c483320df7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleFileNameA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetProcAddress
CloseHandle
ReadProcessMemory
WriteProcessMemory
VirtualAllocEx
OpenProcess
DeleteFileA
CreateThread
GetLastError
ExitProcess
GetWindowsDirectoryA
lstrcmpA
lstrcpyA
CopyFileA
GetLocalTime
WinExec
Sleep
VirtualFreeEx

user32

MessageBoxA
GetWindowThreadProcessId
SendMessageA
FindWindowExA
FindWindowA

advapi32

CreateServiceA
OpenSCManagerA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
CloseServiceHandle

mfc42

ord6569
ord542
ord533
ord5194
ord540
ord668
ord2770
ord356
ord800
ord537
ord802
ord798
ord924
ord926
ord2818
ord858
ord2777
ord1997
ord5465

msvcrt

printf
__CxxFrameHandler
_mbsicmp
sprintf

ws2_32

gethostname
WSAStartup
WSACleanup
gethostbyname

netapi32

Netbios

Sections

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1995015fd3bae92cad4bf4c483320df7

Headers

File Characteristics

Imports

kernel32

user32

advapi32

mfc42

msvcrt

ws2_32

netapi32

Sections

.data Size: 10KB - Virtual size: 11KB

.idata Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 936B

.data
Size: 10KB - Virtual size: 11KB

.idata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 936B