aae41f5c3b111796443c781256fc1bb3a10c649a985a2c1522c4f4e8214c1f34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aae41f5c3b111796443c781256fc1bb3a10c649a985a2c1522c4f4e8214c1f34
Size

139KB
MD5

2df2c33df1f469c7a1c612f90fb3156a
SHA1

7fd27f57dfc0972145aedab791b93e370db4c2d2
SHA256

aae41f5c3b111796443c781256fc1bb3a10c649a985a2c1522c4f4e8214c1f34
SHA512

b7a5a9c11efc0df19890c751ab45e5e915c3f8792565e261e5cf02d720690e0d101d0647eaaed0b07e08ed494956d4445918f26cea41f7d0410cbdd06e1a1bd5
SSDEEP

3072:Wl8oqqj/tiR1YOWDYsy5L/rNDmGTVo0qdTBfVly+KWEvz/:WlC6iPdZmGTudTBtly+KWEvr

Score

N/A

Malware Config

Signatures

Files

aae41f5c3b111796443c781256fc1bb3a10c649a985a2c1522c4f4e8214c1f34
.exe windows x86

ce7b2ba5ca6f0a7963632d795181a2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapReAlloc
HeapFree
lstrlenA
HeapAlloc
WritePrivateProfileStringA
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
GetSystemTimeAsFileTime
CloseHandle

user32

wvsprintfA

advapi32

CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE