c55a8699d7602c8fa607833661a75a07aee4c6b90f09ef03584a1766b7531f12

Sharing

Copy URL Twitter E-mail

General

Target

c55a8699d7602c8fa607833661a75a07aee4c6b90f09ef03584a1766b7531f12
Size

172KB
MD5

44b8656f6e5c34391a5842fc53b3bda0
SHA1

343181ca0e6a30bacbb1a8cd301cc90022d8533a
SHA256

c55a8699d7602c8fa607833661a75a07aee4c6b90f09ef03584a1766b7531f12
SHA512

c942e31e5fe93dd0c2cafac2c2b88df132504fdb609b3b368bc94dfb28ff85dd11651ec147329c818112b4ce39881c1a2a355b7cd3204956bd68cab62a409d80
SSDEEP

3072:6FaBV+b7kJHjV9x40Eow2RZgthbvrjaqGpTm+igkTsuZfw:pQ02LoHgtxD7YTmhgkwuZY

Score

N/A

Malware Config

Signatures

Files

c55a8699d7602c8fa607833661a75a07aee4c6b90f09ef03584a1766b7531f12
.exe windows x86

77f4e6e66cdc1a77ee9f80ef6a6fcfa3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GlobalFree
GlobalLock
GlobalAlloc
SetFileTime
GetFileAttributesExA
GetVersionExA
GetStartupInfoA
GetModuleHandleA
Sleep
GetModuleFileNameA
WinExec
CreateFileA
GetLastError
WriteFile
OpenProcess
GetCurrentProcess
DuplicateHandle
CloseHandle
GetSystemDirectoryA
GlobalUnlock

user32

PostQuitMessage
ShowWindow
CreateWindowExA
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
RegisterClassExA
DefWindowProcA

advapi32

RegCloseKey
DeleteService
OpenServiceA
StartServiceA
CloseServiceHandle
LookupAccountNameA
GetUserNameA
CreateServiceA
RegQueryValueExA
RegOpenKeyExA
OpenSCManagerA
ConvertSidToStringSidA

shlwapi

StrStrA
SHDeleteKeyA
SHSetValueA

msvcrt

_exit
_strlwr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
rand
_except_handler3
_access
srand
time
strstr
fclose
fflush
fwrite
fopen
??3@YAXPAX@Z
??2@YAPAXI@Z
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs

dbghelp

ImageNtHeader

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77f4e6e66cdc1a77ee9f80ef6a6fcfa3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

dbghelp

version

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 108KB - Virtual size: 105KB

cdata Size: 4KB - Virtual size: 4B

idata Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 108KB - Virtual size: 105KB

cdata
Size: 4KB - Virtual size: 4B

idata
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 1KB