8927cb26949d50573a819db91efcaa2f70838628142bab24e56670d2afeb61f9

General

Target

8927cb26949d50573a819db91efcaa2f70838628142bab24e56670d2afeb61f9
Size

169KB
MD5

82f078745b740a4cff8be5c1c426cab6
SHA1

7c06469937fb6b06d2213c3b2afbb47b12acc837
SHA256

8927cb26949d50573a819db91efcaa2f70838628142bab24e56670d2afeb61f9
SHA512

6794397c0414718610d6d4371a37cc769b2b29fdb954bfdc0ab3687c79479eff31e58798f5494d3b544b4414dc43a56e8ede1cacb5b6ac9099d4d030a7f98db8
SSDEEP

3072:+6wLSwBOOsHvSCKXYt4QCHzOM8noBwj9Knud3yT/ClmM3awT+XE3:pwewIOsPBKacz8nTknx7CltaU

Score

N/A

Malware Config

Signatures

Files

8927cb26949d50573a819db91efcaa2f70838628142bab24e56670d2afeb61f9
.exe windows x86

b4881c7e0c8288a89eac5a9626f2b01d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

SetServiceStatus
ReportEventW
OpenProcessToken
DeregisterEventSource
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
ControlService
RegisterEventSourceW
OpenThreadToken
RegEnumKeyExW
CreateServiceW

setupapi

CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status

kernel32

LoadResource
OpenThread
SetPriorityClass
GetSystemTimeAsFileTime
CreateDirectoryW
FindAtomW
GetModuleHandleA
GetCommandLineW
GetCurrentProcessId
EnterCriticalSection
GetFileAttributesW
FindClose
DeviceIoControl
GetExitCodeThread
GetStartupInfoW
FindFirstFileW
GetTickCount
LoadLibraryExW
GetDriveTypeW
EnumResourceLanguagesW
OutputDebugStringW
GetCurrentConsoleFont
SetThreadPriority
ReleaseMutex
FindNextFileW
QueryPerformanceCounter
LeaveCriticalSection
CopyFileW
DeleteFileW
ExitProcess
ResumeThread
CreateFileW
GetProcAddress
FindResourceW

gdi32

DeleteObject

Sections

.text
Size: 88KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4881c7e0c8288a89eac5a9626f2b01d

Headers

File Characteristics

Imports

advapi32

setupapi

kernel32

gdi32

Sections

.text Size: 88KB - Virtual size: 487KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 78KB - Virtual size: 77KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 487KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 78KB - Virtual size: 77KB

.rsrc
Size: 512B - Virtual size: 4KB