77364de00429ad694219a9d96a6977d4017d1231bef39af5330868d8dfe65b9b

General

Target

77364de00429ad694219a9d96a6977d4017d1231bef39af5330868d8dfe65b9b
Size

188KB
MD5

d3344a67e998c092b99e12ef49e5bec8
SHA1

2aae8e4d6d7b6c43f2f6e36e3dc3f17779e1aa7b
SHA256

77364de00429ad694219a9d96a6977d4017d1231bef39af5330868d8dfe65b9b
SHA512

2f3f0ce3256cf0c0ef4cf037e7c02065d3cfb17841c7bf4d1ec0ea732d7cc3da692f9d963a75ac241e5a559a429e1ab535aa78c30e28e12befb427b9575e995f
SSDEEP

3072:FctG/H6OJEBqX1neZZhQAzjMxqQYs9CvumMt2zqTO+dzA36B2tONsN:7/HQQIjMxqOCvgdzK6DN

Score

N/A

Malware Config

Signatures

Files

77364de00429ad694219a9d96a6977d4017d1231bef39af5330868d8dfe65b9b
.exe windows x86

f2ecb8f04ca1ae8942aa504d4b5e2808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
StartServiceA
ChangeServiceConfigA
OpenServiceA
OpenSCManagerA
ChangeServiceConfig2A
CloseServiceHandle
DeleteService
RegRestoreKeyA
RegSaveKeyA
CreateServiceA
ControlService
GetServiceDisplayNameA
GetServiceKeyNameA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

msvcrt

_controlfp
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_ftol
strncpy
__CxxFrameHandler
srand
??2@YAPAXI@Z
memcpy
rand
strlen
memset
strcpy
_except_handler3
strcat
_strrev
_stricmp
_strlwr
strchr
_initterm

kernel32

RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetCurrentThread
GetCurrentProcessId
SetFileAttributesA
DeleteFileA
lstrlenA
CreateDirectoryA
GetCurrentProcess
GetCommandLineA
SetUnhandledExceptionFilter
ExpandEnvironmentStringsA
GetShortPathNameA
GetFileAttributesA
CreateEventA
WaitForSingleObject
GetModuleFileNameA
LoadLibraryA
SleepEx
GetSystemDirectoryA
CreateFileA
WriteFile
GetFileTime
SetFileTime
GetTickCount
Sleep
GetProcAddress
GetModuleHandleA
GetLastError
ExitProcess
GetCurrentDirectoryA
GetTempPathA
MoveFileA
CloseHandle

ws2_32

listen

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2ecb8f04ca1ae8942aa504d4b5e2808

Headers

File Characteristics

Imports

advapi32

msvcrt

kernel32

ws2_32

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 164KB - Virtual size: 164KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 164KB - Virtual size: 164KB

.rsrc
Size: 4KB - Virtual size: 3KB