fbffdb34f168ea05f1ae05849fcc4e082aa208d2cf66d0c61105da4a08a1cb0e

Sharing

Copy URL Twitter E-mail

General

Target

fbffdb34f168ea05f1ae05849fcc4e082aa208d2cf66d0c61105da4a08a1cb0e
Size

6.3MB
MD5

79214cfbb458c91d0106b6db58ffe8b3
SHA1

2d45cdbe093b4715925639636c3aeae55f52d885
SHA256

fbffdb34f168ea05f1ae05849fcc4e082aa208d2cf66d0c61105da4a08a1cb0e
SHA512

1eb526d6ca78971cc261c61b73e99765f74c98906f9c4ddd1b05a86c2f1931a1f54ac34090be4e4428e202864aa22abb131def6290e744c8153e80fed87000bd
SSDEEP

98304:bs9sPXjoeq3pzt9spaEBZ6rNXIINemaxK3eNC9UxlhJVtjnM5SNqFamSKEny:Q9sraJ/9OIIou/Vt7M5SMcZKEny

Score

N/A

Malware Config

Signatures

Files

fbffdb34f168ea05f1ae05849fcc4e082aa208d2cf66d0c61105da4a08a1cb0e
.exe windows x86

b9092d729b462ce34e1fa4c262d0604f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
GetComputerNameA
CreateDirectoryA
GetTempPathA
GetCommandLineA
CreateMutexA
GetLastError
CreateProcessA
GetExitCodeProcess
LocalFree
SetFileAttributesA
GetTempFileNameA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA
GetVersion
GetLocalTime
lstrcpynA
GetCurrentThreadId
WriteFile
WaitForSingleObject
SetFilePointer
ReleaseMutex
CreateFileA
DeleteFileA
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ExitProcess
HeapFree
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GetFileType
EnterCriticalSection
LeaveCriticalSection
ReadFile
SetEndOfFile
GetSystemTimeAsFileTime
GetACP
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedExchange
VirtualQuery
InitializeCriticalSection
GetLocaleInfoA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
HeapSize

user32

WaitForInputIdle
wsprintfA

advapi32

OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource
StartServiceCtrlDispatcherA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9092d729b462ce34e1fa4c262d0604f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 2KB