a506b7fc1e8f410464c7a9a7bf08e7e0377708bc985adda28886904dfb6352b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a506b7fc1e8f410464c7a9a7bf08e7e0377708bc985adda28886904dfb6352b4
Size

139KB
MD5

2a09d8617de8b12fa7db42d8441396c0
SHA1

f5657a0560365e63dde70d99af0ddf02d55d69a5
SHA256

a506b7fc1e8f410464c7a9a7bf08e7e0377708bc985adda28886904dfb6352b4
SHA512

1cd4d0b597fd814bf85edcc0e088b3d2d37e2e37cb89011157eca647dc2a2ba178b557a67a8f30b2873b5ccd6bf80a5776cd0384bd1a5d7dcd8e4b611204e0a8
SSDEEP

3072:Wl8oqqj/tiR1YOWDYsy5L/rNDmGTVo0qdTBfVly+KWEvz7:WlC6iPdZmGTudTBtly+KWEv/

Score

N/A

Malware Config

Signatures

Files

a506b7fc1e8f410464c7a9a7bf08e7e0377708bc985adda28886904dfb6352b4
.exe windows x86

ce7b2ba5ca6f0a7963632d795181a2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapReAlloc
HeapFree
lstrlenA
HeapAlloc
WritePrivateProfileStringA
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
GetSystemTimeAsFileTime
CloseHandle

user32

wvsprintfA

advapi32

CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE