4ae3d901632868f6a14297245c69e6f57f9650cf384138fae5ccb4d006ba39ba

General

Target

4ae3d901632868f6a14297245c69e6f57f9650cf384138fae5ccb4d006ba39ba
Size

127KB
MD5

b4cffbff2bf13ba2e2f4c58ef4c9b0dd
SHA1

b21b36d9da44062ca154c1b80bfcdc8342ee0a25
SHA256

4ae3d901632868f6a14297245c69e6f57f9650cf384138fae5ccb4d006ba39ba
SHA512

bda38606399ba140c2bc539677e118d4ecf525616abe8ddf5c18ddf1836cfb260ee5352081f9e993f2fffe79c006ec666776a3ca39a32877a9a1496d9e2e65ad
SSDEEP

3072:I44/Y2dxHcLMFphR5CLF9SCP1GFOQ1wQEADuFTiYa:L4/Ym8AT58huOQ1eAKVda

Score

N/A

Malware Config

Signatures

Files

4ae3d901632868f6a14297245c69e6f57f9650cf384138fae5ccb4d006ba39ba
.exe windows x86

6aa61c2ee90a8ecfeef1d9c8aef1e0e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
_CxxThrowException
strcpy
strrchr
printf
__CxxFrameHandler
_access
strcat
sprintf
strlen
??2@YAPAXI@Z
memset
memcpy
??3@YAXPAX@Z
_strcmpi

psapi

GetProcessMemoryInfo

kernel32

lstrcmpiA
Process32Next
CreateToolhelp32Snapshot
Process32First
OutputDebugStringA
GetLastError
CreateFileA
CloseHandle
GetCurrentProcess
ReadFile
SetFilePointer
WriteFile
GetFileSize
CreateProcessA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
MoveFileExA
CopyFileA
DeleteFileA
LockResource
SizeofResource
LoadResource
FindResourceA
GetVersionExA
WaitForSingleObject
GetStartupInfoA
Sleep
DeviceIoControl
GetWindowsDirectoryA
LoadLibraryA
GetCommandLineA
GetProcAddress
VirtualProtect
VirtualQuery
GetSystemDirectoryA

user32

PostQuitMessage
SetWindowLongA
SetTimer
KillTimer
DialogBoxParamA
GetWindowLongA
EndDialog

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseServiceHandle
DeleteService
ControlService
OpenServiceA
OpenSCManagerA
QueryServiceStatus
StartServiceA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6aa61c2ee90a8ecfeef1d9c8aef1e0e8

Headers

File Characteristics

Imports

msvcrt

psapi

kernel32

user32

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 832B

.rsrc Size: 114KB - Virtual size: 114KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 832B

.rsrc
Size: 114KB - Virtual size: 114KB