da1651e89af9ed4788210b17e64a586a8e4bdfe6be7f4303341ec73953d46366

General

Target

da1651e89af9ed4788210b17e64a586a8e4bdfe6be7f4303341ec73953d46366
Size

132KB
MD5

c53fff1d9fbf930be39ac81440b15e2b
SHA1

7651b175aaca6140bd95933d0122d6c2eac8ab06
SHA256

da1651e89af9ed4788210b17e64a586a8e4bdfe6be7f4303341ec73953d46366
SHA512

11c91ad45639d32a7c7ebfd9c9746ac21aeaad06eb024f67913bc023ca0aaadf6765b4b1cb760085ca5a0aead03afa9892cabd170d92c58ab8dbd46f7ed229b7
SSDEEP

1536:CKam08eU3+JsM1qt+folCaRyupKCyW1ZanFHBLvKuRVwuDQjbibO3Jf:laQekjM1qt++RTnZZylBDKXuDQjbibS

Score

N/A

Malware Config

Signatures

Files

da1651e89af9ed4788210b17e64a586a8e4bdfe6be7f4303341ec73953d46366
.exe windows x86

e96c4bed2e87ac488cc029ff034f5a04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetModuleFileNameA
CreateThread
GetTempPathA
lstrlenA
GetEnvironmentVariableA
CopyFileA
GetSystemDirectoryA
CompareStringW
CompareStringA
lstrcpyA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
CreateFileA
GetFileSize
ReadFile
CloseHandle
FindFirstFileA
HeapAlloc
WriteFile
FindClose
Sleep
GetTickCount
lstrcatA
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
GetLastError
HeapReAlloc
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetVersionExA
HeapDestroy
HeapCreate
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA

user32

wsprintfA

advapi32

RegQueryValueExA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e96c4bed2e87ac488cc029ff034f5a04

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 92KB - Virtual size: 92KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 4KB - Virtual size: 1KB