2c918d937074d62d920f5d88ab5d6b4ebe7db2e4427b24ebe949564e73eac34d

General

Target

2c918d937074d62d920f5d88ab5d6b4ebe7db2e4427b24ebe949564e73eac34d
Size

23KB
MD5

a3b19dd225079776b72a148b60cc16d0
SHA1

5cdec4434dad79d34fee3936997b90e0bbd1abef
SHA256

2c918d937074d62d920f5d88ab5d6b4ebe7db2e4427b24ebe949564e73eac34d
SHA512

47dc7681ea8ddc8a16dc3bd3fa9be8cea7bf7a032cf29519d085d0a1b9aa6096e50ef191f1504612066ae865f704c225a08fd0ae6dc101591c519bc597dddf61
SSDEEP

384:6rlnEjbWreEATVRPwzOeoB8uNQoN98O4lwaWjBWianGcM4aeW:mlnEbWrcTAoX/7ulwPunLbae

Score

N/A

Malware Config

Signatures

Files

2c918d937074d62d920f5d88ab5d6b4ebe7db2e4427b24ebe949564e73eac34d
.exe windows x86

e206a5499fa29af0ec1b23f008ea51f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyW
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
DeleteService
OpenServiceW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW

ntdll

RtlUnwind
_wcsicmp
_snwprintf
wcsncpy
wcschr
wcscpy
wcsrchr
NtQuerySystemInformation
sprintf
_vsnprintf
NtQueryVirtualMemory

setupapi

SetupCloseInfFile
SetupGetLineTextW
SetupFindFirstLineW
SetupOpenInfFileW
SetupFindNextLine

msvcrt

_initterm
__wgetmainargs
exit
_controlfp
_XcptFilter
_exit
_c_exit
free
malloc
wprintf
printf
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_cexit
__setusermatherr
__winitenv

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DeleteFileW
GetVersionExW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetFileAttributesW
GetModuleFileNameW
FlushFileBuffers
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
CreateFileA
SetFilePointer
GetLocalTime
GetLastError
GetTickCount
WriteFile
SetLastError

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e206a5499fa29af0ec1b23f008ea51f7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ntdll

setupapi

msvcrt

kernel32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 3KB