fd000ce5cfccc66d9332fa09615d1b8e56e4bb66f4ea6ab3bb4fd717cd7c2d84

General

Target

fd000ce5cfccc66d9332fa09615d1b8e56e4bb66f4ea6ab3bb4fd717cd7c2d84
Size

64KB
MD5

4b57c35a9a84298a3463cb9b456cd633
SHA1

5ee53c4cb80e5f7d5be14db3e232dd9559417cf3
SHA256

fd000ce5cfccc66d9332fa09615d1b8e56e4bb66f4ea6ab3bb4fd717cd7c2d84
SHA512

cdf53f799ca128bc2793514f2c35da87f88da7a078bbf9ee4119cfe9b4a3b8d0b36a6ba7d4b806792fa0621e0999e26f9f21a8b53f10bcc95f23ea5d8db9fa56
SSDEEP

768:mNZ6qfA0aE6YHKHwXExZQ2mzd4K/l31LMw+Q7kV0buoHVgv:Q0qArYHNE3CjbLDf5CoHVgv

Score

N/A

Malware Config

Signatures

Files

fd000ce5cfccc66d9332fa09615d1b8e56e4bb66f4ea6ab3bb4fd717cd7c2d84
.exe windows x86

aea4f75fb5af9b50cf68c0f947ebe3f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathA
GetFileAttributesA
UnlockFile
Sleep
GetLastError
GetModuleFileNameA
GetShortPathNameA
CreateProcessA
LoadLibraryA
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
CloseHandle
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
GetStringTypeA
GetStringTypeW
SetStdHandle

gdi32

GetTextCharsetInfo

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
ControlService
DeleteService
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
RegCreateKeyA
RegSetValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeregisterEventSource
GetUserNameA
CreateProcessAsUserA
OpenProcessToken

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aea4f75fb5af9b50cf68c0f947ebe3f3

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 936B

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 936B