98e76e9b96477a0075ab204d3d22ae9cefb83b35e8dd834dc177aa609b80fc7b

Sharing

Copy URL Twitter E-mail

General

Target

98e76e9b96477a0075ab204d3d22ae9cefb83b35e8dd834dc177aa609b80fc7b
Size

152KB
MD5

6049ecc8ec9250b3d9320ffbf7f32619
SHA1

1af3ff47eeeaf2c52edf7c8eb83c7a5697c97fd9
SHA256

98e76e9b96477a0075ab204d3d22ae9cefb83b35e8dd834dc177aa609b80fc7b
SHA512

00c4c53864af3e23d61fb63e92ab489dea3cbcd6c6aeb91ffc13a70fc90a107d6221b988657283c7fd814516e7128724c0018a01c43d3b1924f1446144cb0cd0
SSDEEP

3072:844oj9w7wjlhTvKLZ3DKs0zwLSKljjFDzvwyERfhJ:8ejaMxhbKN3D50zjKlFPG

Score

N/A

Malware Config

Signatures

Files

98e76e9b96477a0075ab204d3d22ae9cefb83b35e8dd834dc177aa609b80fc7b
.exe windows x86

46be60c0fb06482c20c5b84bbc497c6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
OpenProcess
CreateFileA
GetModuleFileNameA
DuplicateHandle
GetCurrentProcess
WriteFile
SetFileTime
GetFileAttributesExA
GetStartupInfoA
GetModuleHandleA
GetVersionExA
GetLastError
WinExec
CloseHandle
GetSystemDirectoryA
Sleep

user32

DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
RegisterClassExA
DefWindowProcA
PostQuitMessage
ShowWindow
CreateWindowExA

advapi32

RegQueryValueExA
CreateServiceA
OpenServiceA
DeleteService
CloseServiceHandle
StartServiceA
RegCloseKey
RegOpenKeyExA
ConvertSidToStringSidA
LookupAccountNameA
GetUserNameA
OpenSCManagerA

shlwapi

SHDeleteKeyA
SHSetValueA

msvcrt

_exit
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
srand
time
sprintf
rand
??3@YAXPAX@Z
??2@YAPAXI@Z
_access
_except_handler3
fclose
fflush
fwrite
fopen
_XcptFilter
exit
_acmdln
__getmainargs

dbghelp

ImageNtHeader

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

edata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46be60c0fb06482c20c5b84bbc497c6e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

dbghelp

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 108KB - Virtual size: 104KB

mdata Size: 4KB - Virtual size: 4B

edata Size: 4KB - Virtual size: 4B

cdata Size: 4KB - Virtual size: 4B

idata Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 108KB - Virtual size: 104KB

mdata
Size: 4KB - Virtual size: 4B

edata
Size: 4KB - Virtual size: 4B

cdata
Size: 4KB - Virtual size: 4B

idata
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 1KB