6446cab69f736057bd6fe88fc23bbd3141878fba6190a0ab003b4fe0c8d56a6b

Sharing

Copy URL Twitter E-mail

General

Target

6446cab69f736057bd6fe88fc23bbd3141878fba6190a0ab003b4fe0c8d56a6b
Size

140KB
MD5

f3f1c823cdde0d559058db9e00800d5b
SHA1

33288cb49fc6ddcd7f8730978289dcd3dd47fa95
SHA256

6446cab69f736057bd6fe88fc23bbd3141878fba6190a0ab003b4fe0c8d56a6b
SHA512

532208d816ba4147e48117dc66e3d22d12282ffef71f961e5257b9aee3c3e458457205038f14913cb8c73211d81e983762856aa6e20241713a3d7dced497942b
SSDEEP

1536:1sVg8vbbl2scARgJyxl7S/uG0MK9zDm3BkUfycF735q4b5kKf1IssfyS:1zBscARgJyXLEuikUfycC+pI+S

Score

N/A

Malware Config

Signatures

Files

6446cab69f736057bd6fe88fc23bbd3141878fba6190a0ab003b4fe0c8d56a6b
.exe windows x86

63510badc51bc4f69f65ca79b5fd48c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
OpenProcess
WriteFile
GetLastError
DuplicateHandle
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetStartupInfoA
GetModuleHandleA
Sleep
GetFileAttributesExA
SetFileTime
CreateFileA
CloseHandle
GetModuleFileNameA
WinExec
GetSystemDirectoryA
GetVersionExA
LoadLibraryA
GetProcAddress

user32

ShowWindow
CreateWindowExA
RegisterClassExA
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage

advapi32

DeleteService
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ConvertSidToStringSidA
LookupAccountNameA
GetUserNameA
OpenServiceA
StartServiceA
CreateServiceA
OpenSCManagerA

shlwapi

SHDeleteKeyA
SHSetValueA
StrStrA

msvcrt

_exit
_strlwr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
srand
time
sprintf
rand
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
_access
fclose
fflush
fwrite
fopen
strstr
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs

dbghelp

ImageNtHeader

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63510badc51bc4f69f65ca79b5fd48c8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

dbghelp

version

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 108KB - Virtual size: 106KB

idata Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 108KB - Virtual size: 106KB

idata
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 1KB