6fbf9a3fb4a7b81d07fe6dafa3190ea84c3708a024b5a99688e5963a133d6b04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fbf9a3fb4a7b81d07fe6dafa3190ea84c3708a024b5a99688e5963a133d6b04
Size

139KB
MD5

3790bc739346d9ea046e9f6f9cdb3a9d
SHA1

1dd5116bf202ed206afba41ab3635893cd7a5dde
SHA256

6fbf9a3fb4a7b81d07fe6dafa3190ea84c3708a024b5a99688e5963a133d6b04
SHA512

21459e7e8beec1633f81d75b995a40d44f9f33c61edcf26400895f243d9662fac30571200c74a4e227d2f33eb95328b507f9131f43cc7c2426a5c5e52379adbd
SSDEEP

3072:Wl8oqqj/tiR1YOWDYsy5L/rNDmGTVo0qdTBfVly+KWEvza:WlC6iPdZmGTudTBtly+KWEv

Score

N/A

Malware Config

Signatures

Files

6fbf9a3fb4a7b81d07fe6dafa3190ea84c3708a024b5a99688e5963a133d6b04
.exe windows x86

ce7b2ba5ca6f0a7963632d795181a2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapReAlloc
HeapFree
lstrlenA
HeapAlloc
WritePrivateProfileStringA
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
GetSystemTimeAsFileTime
CloseHandle

user32

wvsprintfA

advapi32

CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE