88d82421866be9c423ac67479cd75cd63cb763a3b3e797798001e2c8ce45e60a

General

Target

88d82421866be9c423ac67479cd75cd63cb763a3b3e797798001e2c8ce45e60a
Size

101KB
MD5

847b5170d134db714e6de0122b319150
SHA1

2a6d3f75fdce909b7d2dfab54276645b2fc14744
SHA256

88d82421866be9c423ac67479cd75cd63cb763a3b3e797798001e2c8ce45e60a
SHA512

5ba8a279ef0416396c0e84a4997979aba95c6014593b386fb1b5e5e1c24858c778cac2fa2028c056f520ce3c4f4e19b8400f2f30b07df137531cfc5f43d5c418
SSDEEP

1536:4Nc8V9MYRTmUeuoGdEaPF7WOCzKP0lS7lHKXq36s27oIfPpuD8yF:N8V9MYoLuJCOC3SpHuC6JnfB3c

Score

N/A

Malware Config

Signatures

Files

88d82421866be9c423ac67479cd75cd63cb763a3b3e797798001e2c8ce45e60a
.exe windows x86

4e9b79551bd1ddda6deb4126bf054bd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__CxxFrameHandler
_onexit
__getmainargs
_acmdln
exit
_XcptFilter
_exit
printf
strncpy
free
malloc
_stricmp
__setusermatherr
__dllonexit
_initterm
??2@YAPAXI@Z
_EH_prolog
??3@YAXPAX@Z

advapi32

CreateServiceA
DeregisterEventSource
CloseServiceHandle
ReportEventA
RegCreateKeyExA
RegQueryValueExA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
RegisterEventSourceA
OpenServiceA
ControlService
DeleteService
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
OpenSCManagerA

kernel32

GetLastError
GetModuleFileNameA
Sleep
GetModuleHandleA
GetStartupInfoA

ole32

IIDFromString
CoInitialize
CoCreateInstance
CoUninitialize

rpcrt4

RpcServerRegisterIf
RpcProtseqVectorFreeA
RpcNetworkInqProtseqsA
RpcServerUseProtseqEpA
NdrServerCall2
RpcMgmtStopServerListening
RpcServerListen

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4e9b79551bd1ddda6deb4126bf054bd1

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

ole32

rpcrt4

Sections

.text Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 324B

.rsrc Size: 72KB - Virtual size: 72KB

.text
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 324B

.rsrc
Size: 72KB - Virtual size: 72KB