8b4e525c27bb0dd8e6c3cb72eacd7046b6cfd836232134e8e3858efa98b6e863

Sharing

Copy URL

Twitter E-mail

General

Target

8b4e525c27bb0dd8e6c3cb72eacd7046b6cfd836232134e8e3858efa98b6e863
Size

156KB
MD5

54bacb3d4065ed8ec6cade45b9983b20
SHA1

8138d4c24158384f01b8a8c637441fcd2abc1447
SHA256

8b4e525c27bb0dd8e6c3cb72eacd7046b6cfd836232134e8e3858efa98b6e863
SHA512

970218b429765c171e2c2f8598e2718f4aa81d19e3d95873fa52ae50dcea5894dc4d25ee53078b383cb643a8dfdef692cb4e1dad1f8c93778d48432e42ba21cb
SSDEEP

3072:WQ0r+vcdrEj3k7mheVWN7FljNiwmsGcMlNxuK80CCa1Ff:hKrEj+mhe0jNGsgl2K8kS

Score

N/A

Malware Config

Signatures

Files

8b4e525c27bb0dd8e6c3cb72eacd7046b6cfd836232134e8e3858efa98b6e863
.exe windows x86

9765c829e0b41cc9e6114478ef727dcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CloseServiceHandle
StartServiceW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
QueryServiceConfigW
RegSetValueExW
RegEnumKeyExW
DeregisterEventSource
ReportEventW
RegisterEventSourceW

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

VariantInit
VariantClear
GetErrorInfo
SysFreeString

kernel32

GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
GetVersionExW
GetComputerNameW
FreeLibrary
GetLastError
GetProcAddress
Sleep
GetTickCount
LoadLibraryW
GetSystemDirectoryW
LocalFree
FormatMessageW
lstrcpynW

msvcr71

_exit
_controlfp
_onexit
_wcsicmp
wcslen
_wtoi
wcsncpy
memset
__dllonexit
wcscat
wcscpy
??3@YAXPAX@Z
??2@YAPAXI@Z
wprintf
_vsnwprintf
div
wcscmp
wcsncat
_itow
free
malloc
wcschr
__security_error_handler
_except_handler3
_c_exit
_ultow
_XcptFilter
_cexit
exit
__p___winitenv
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

netapi32

NetGetAnyDCName
NetApiBufferFree

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

,��[A
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9765c829e0b41cc9e6114478ef727dcb

Headers

File Characteristics

Imports

advapi32

ole32

oleaut32

kernel32

msvcr71

netapi32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 1KB

,��[A Size: 88KB - Virtual size: 88KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 1KB

,��[A
Size: 88KB - Virtual size: 88KB