7b9cb7271e71fe1c05c03d50fdc4188dacc1919ac73ffaa118a0ab648dc6c699

Sharing

Copy URL Twitter E-mail

General

Target

7b9cb7271e71fe1c05c03d50fdc4188dacc1919ac73ffaa118a0ab648dc6c699
Size

97KB
MD5

6a1ee72d405bb978ff75dd1cc3250ae2
SHA1

eb258cf7946187106bea33e4cf4fe5e179300610
SHA256

7b9cb7271e71fe1c05c03d50fdc4188dacc1919ac73ffaa118a0ab648dc6c699
SHA512

b8318d4d58de26555bc4ece8c0637c3eb7d873c0a7b998784e1b50d8b02ccf8bf3cb1cd0ca77be1923f732da0a8bcacb9fd2a5bb60ef58f0bab4929b3bb0a13d
SSDEEP

3072:ssixqhkFKd6ffzNuHzE7lXtsnePz4LRGcOE:snqh7d0fzNi4lXtsazePOE

Score

N/A

Malware Config

Signatures

Files

7b9cb7271e71fe1c05c03d50fdc4188dacc1919ac73ffaa118a0ab648dc6c699
.exe windows x86

efe311f27b1ec80aaf7e58853426188e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
GetCurrentProcess
OpenProcess
WriteFile
Sleep
LoadLibraryA
GetStartupInfoA
GetModuleHandleA
GetProcAddress
GetLastError
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
GetVersionExA
GetModuleFileNameA
GetSystemDirectoryA
WinExec

user32

CreateWindowExA
DefWindowProcA
GetMessageA
ShowWindow
PostQuitMessage
TranslateMessage
RegisterClassExA
DispatchMessageA
GetDesktopWindow

advapi32

OpenServiceA
LookupAccountNameA
ConvertSidToStringSidA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
DeleteService
StartServiceA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetUserNameA

msvcrt

__getmainargs
_stricmp
_controlfp
__set_app_type
__p__fmode
srand
time
rand
sprintf
fclose
fflush
fwrite
fopen
_access
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

shlwapi

SHDeleteKeyA
SHSetValueA

dbghelp

ImageNtHeader

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

edata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

efe311f27b1ec80aaf7e58853426188e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

shlwapi

dbghelp

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 104KB - Virtual size: 102KB

mdata Size: 4KB - Virtual size: 4B

edata Size: 4KB - Virtual size: 4B

cdata Size: 4KB - Virtual size: 4B

idata Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 104KB - Virtual size: 102KB

mdata
Size: 4KB - Virtual size: 4B

edata
Size: 4KB - Virtual size: 4B

cdata
Size: 4KB - Virtual size: 4B

idata
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 1KB