b96c3e2a6d554ba35a35f06029d100ae2d87a1e4eb76d5531b4a854922db3be6

General

Target

b96c3e2a6d554ba35a35f06029d100ae2d87a1e4eb76d5531b4a854922db3be6
Size

71KB
MD5

3a68fab195f0fd9e8a36a2f40e38fbd6
SHA1

faf73ca4002fe96f9cea227f6ef20015664b3495
SHA256

b96c3e2a6d554ba35a35f06029d100ae2d87a1e4eb76d5531b4a854922db3be6
SHA512

5cf04ea61731f21976d8886c3799ec04ff171bc014d0ef5cbbb6d0f0c15333b823c6bc429f99efe332188f18643142127fc873b5d66d19214b6d36033175b74d
SSDEEP

1536:O/f4xJygETN68dPLvu3QwDCIwUejMH6rAjxw:O/f4xJygETN68dPLvu3QwDCIwU7arAG

Score

N/A

Malware Config

Signatures

Files

b96c3e2a6d554ba35a35f06029d100ae2d87a1e4eb76d5531b4a854922db3be6
.exe windows x86

9e7c2ac507da1b471f1ea18b869330ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ControlService
CloseServiceHandle
OpenServiceA
OpenSCManagerA
StartServiceA
CreateServiceA
DeleteService

kernel32

OutputDebugStringA
WinExec
GetLastError
CreateDirectoryA
GetSystemDirectoryA
FindNextFileA
DeleteFileA
FindFirstFileA
ExitProcess
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetModuleFileNameA
GetCurrentProcess
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
Sleep
DeviceIoControl
MoveFileExA
SetFileAttributesA
CopyFileA
lstrcatA
lstrcpyA
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange

user32

wsprintfA

msvcrt

__getmainargs
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
memset
malloc
fopen
fwrite
fclose
sprintf
_cexit

shell32

ShellExecuteA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e7c2ac507da1b471f1ea18b869330ff

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

shell32

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 54KB - Virtual size: 55KB

.rsrc Size: 5KB - Virtual size: 8KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 54KB - Virtual size: 55KB

.rsrc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 1KB - Virtual size: 1KB