261f50e9d96c48292b5a17ef977b7944f44d8681cd8c4441ac08cf4438c31e96

Sharing

Copy URL Twitter E-mail

General

Target

261f50e9d96c48292b5a17ef977b7944f44d8681cd8c4441ac08cf4438c31e96
Size

144KB
MD5

815749b9226640a317164bd2d1d29eb6
SHA1

64b4a57b3d37d02d195e69c2cd8ba9aabc6eda5f
SHA256

261f50e9d96c48292b5a17ef977b7944f44d8681cd8c4441ac08cf4438c31e96
SHA512

48a32c3b1a9205c5b173128340c6cb5c6955c368e4e035222816b298383b2aade69a12494e6b63a33ab993d4d93549eb223adc2230a0a897f26a8ef5a47b357e
SSDEEP

1536:66JOlW6J7dbLuiiiwGJLMRLzi/eHJJGfTEdyaK6vKy6qyDh8Q2naQ59rlCv1:6O6ddwGJLM1WMXcgd5GqyDh32nT2t

Score

N/A

Malware Config

Signatures

Files

261f50e9d96c48292b5a17ef977b7944f44d8681cd8c4441ac08cf4438c31e96
.exe windows x86

6cff8e4920f181442000a54f781edc8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameA
GetVersionExA
DuplicateHandle
GetCurrentProcess
WriteFile
GetStartupInfoA
GetModuleHandleA
WinExec
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
GetProcAddress
CloseHandle
CreateFileA
GetLastError
Sleep
LoadLibraryA
OpenProcess

user32

RegisterClassExA
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage
ShowWindow
CreateWindowExA

advapi32

RegQueryValueExA
LookupAccountNameA
ConvertSidToStringSidA
OpenSCManagerA
CloseServiceHandle
StartServiceA
OpenServiceA
RegCloseKey
RegOpenKeyExA
DeleteService
CreateServiceA
GetUserNameA

shlwapi

SHDeleteKeyA
StrStrA
SHSetValueA

msvcrt

_exit
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
srand
time
rand
_access
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
fclose
fflush
fwrite
fopen
strstr
_except_handler3
_strlwr
_XcptFilter
exit
_acmdln
__getmainargs

dbghelp

ImageNtHeader

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

edata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cff8e4920f181442000a54f781edc8c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

dbghelp

version

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 104KB - Virtual size: 102KB

edata Size: 4KB - Virtual size: 4B

cdata Size: 4KB - Virtual size: 4B

idata Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 104KB - Virtual size: 102KB

edata
Size: 4KB - Virtual size: 4B

cdata
Size: 4KB - Virtual size: 4B

idata
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 1KB