8b8bb638b7e4300dcd7b3db024e502acb5bff69fae47b675abd798f70436936b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b8bb638b7e4300dcd7b3db024e502acb5bff69fae47b675abd798f70436936b
Size

139KB
MD5

24ea9479c2c38a73d09068a37e3c38c5
SHA1

5863b2f2d80a8611ada824a8dbd951471cd27a3e
SHA256

8b8bb638b7e4300dcd7b3db024e502acb5bff69fae47b675abd798f70436936b
SHA512

23b2c0e93d267ade61cbfc1d78d621b5ed3fd47ccdac11306e6bf4a6f8115ec9114055b19958c35f29bec31951c7716a927d6bf32becf831ea3e1f801106b9b6
SSDEEP

3072:Wl8oqqj/tiR1YOWDYsy5L/rNDmGTVo0qdTBfVly+KWEvzb:WlC6iPdZmGTudTBtly+KWEvX

Score

N/A

Malware Config

Signatures

Files

8b8bb638b7e4300dcd7b3db024e502acb5bff69fae47b675abd798f70436936b
.exe windows x86

ce7b2ba5ca6f0a7963632d795181a2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapReAlloc
HeapFree
lstrlenA
HeapAlloc
WritePrivateProfileStringA
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
GetSystemTimeAsFileTime
CloseHandle

user32

wvsprintfA

advapi32

CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE