9308719db92950e8af5d7d3413dc0aa131c22492c96dd99cd0b6cab5c1d092e4

Sharing

Copy URL Twitter E-mail

General

Target

9308719db92950e8af5d7d3413dc0aa131c22492c96dd99cd0b6cab5c1d092e4
Size

6.3MB
MD5

cd0e3c6c5fb4baa8f717ae742deb6f3f
SHA1

8e4c468460920d53efe63ba7d489925fd84f79b9
SHA256

9308719db92950e8af5d7d3413dc0aa131c22492c96dd99cd0b6cab5c1d092e4
SHA512

74cccec70c3585ad5a2c8d1840cc0e65971def31d518bfb009c7269487fe44a68a45572d7657726e59e2a5008bdb78efe84769b9ffcccb55155dfab05c07a4ec
SSDEEP

98304:Ts9sPXjoeq3pzt9spaEBZ6rNXIINemaxK3eNC9UxlhJVtjnM5SNqFamSKEnG:o9sraJ/9OIIou/Vt7M5SMcZKEnG

Score

N/A

Malware Config

Signatures

Files

9308719db92950e8af5d7d3413dc0aa131c22492c96dd99cd0b6cab5c1d092e4
.exe windows x86

b9092d729b462ce34e1fa4c262d0604f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
GetComputerNameA
CreateDirectoryA
GetTempPathA
GetCommandLineA
CreateMutexA
GetLastError
CreateProcessA
GetExitCodeProcess
LocalFree
SetFileAttributesA
GetTempFileNameA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA
GetVersion
GetLocalTime
lstrcpynA
GetCurrentThreadId
WriteFile
WaitForSingleObject
SetFilePointer
ReleaseMutex
CreateFileA
DeleteFileA
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ExitProcess
HeapFree
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GetFileType
EnterCriticalSection
LeaveCriticalSection
ReadFile
SetEndOfFile
GetSystemTimeAsFileTime
GetACP
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedExchange
VirtualQuery
InitializeCriticalSection
GetLocaleInfoA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
HeapSize

user32

WaitForInputIdle
wsprintfA

advapi32

OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource
StartServiceCtrlDispatcherA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9092d729b462ce34e1fa4c262d0604f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 2KB