000d622e941132e8f8238ce9bde766333c6ce8dc9d3a1f2dc18987cd2a24424d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000d622e941132e8f8238ce9bde766333c6ce8dc9d3a1f2dc18987cd2a24424d
Size

544KB
MD5

0da285c234b6705b96334709c24c6af0
SHA1

59998b608de629a928e3e2390a943c38dcf21d70
SHA256

000d622e941132e8f8238ce9bde766333c6ce8dc9d3a1f2dc18987cd2a24424d
SHA512

2b9b509d316177e32f2e6c06e89f6682e130797081862dde2b86973e5f8ac1ff68b0ae4ea91656bbfb60dc76bdd59d50666942756e623e6cf1f7649534cafdba
SSDEEP

12288:0oi/3QLq25UCErMuXOpAMaIKpY8SX1NMCcbbACL:i/3mqgU0ukDWpazMCKsCL

Score

N/A

Malware Config

Signatures

Files

000d622e941132e8f8238ce9bde766333c6ce8dc9d3a1f2dc18987cd2a24424d
.exe windows x86

78e41fb237a9e9e7acea9adfdb986c92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SystemFunction001
DeleteService

kernel32

GetThreadLocale
GetSystemDefaultLangID
GetCurrentProcess

Sections

.text
Size: 537KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 383B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE