cfa6c609c550a187b5c4d78385c9bdd29f3021b95f6431b52f57819aeb512bd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfa6c609c550a187b5c4d78385c9bdd29f3021b95f6431b52f57819aeb512bd8
Size

139KB
MD5

2f6e3d8537ee0267ae94474bb512886d
SHA1

17863224b0bb2976ad4c0b7f544c467c9a25ba21
SHA256

cfa6c609c550a187b5c4d78385c9bdd29f3021b95f6431b52f57819aeb512bd8
SHA512

8f4760538a85e976bb5bf192356eb35cb3a7d02e4fadc7363f2a1245e13a4871371e90c6ea05b61bf23f3cfa76988a0abecfbc283fcdd49ca84a4d98247d4fc8
SSDEEP

3072:Wl8oqqj/tiR1YOWDYsy5L/rNDmGTVo0qdTBfVly+KWEvz8:WlC6iPdZmGTudTBtly+KWEvg

Score

N/A

Malware Config

Signatures

Files

cfa6c609c550a187b5c4d78385c9bdd29f3021b95f6431b52f57819aeb512bd8
.exe windows x86

ce7b2ba5ca6f0a7963632d795181a2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapReAlloc
HeapFree
lstrlenA
HeapAlloc
WritePrivateProfileStringA
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
GetSystemTimeAsFileTime
CloseHandle

user32

wvsprintfA

advapi32

CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE