a8740363d03a533dbb1ac56f80e75d410e1c69ca0da5be9f3a3b967a610560ca

Sharing

Copy URL Twitter E-mail

General

Target

a8740363d03a533dbb1ac56f80e75d410e1c69ca0da5be9f3a3b967a610560ca
Size

133KB
MD5

0cf66a7eb6bf0c260f36c8d05a437670
SHA1

41ba455549e9030bbb46f7b2c8ab6ea55ac64c66
SHA256

a8740363d03a533dbb1ac56f80e75d410e1c69ca0da5be9f3a3b967a610560ca
SHA512

376d93d7857a66b898087e7d70521301846eb3b1c7f9e827969d59940e183644ce1d95a6e26894e7e393f5ff153180c73f77334fa072e10a398b3e757b1c6194
SSDEEP

3072:b+ZXzPiOkCQ+64aVOb2oJoFFPxR0t/QtKRmwK:b+tzPiOg+67VObJeBxRM/QQowK

Score

N/A

Malware Config

Signatures

Files

a8740363d03a533dbb1ac56f80e75d410e1c69ca0da5be9f3a3b967a610560ca
.exe windows x86

fef88604da968b85aeab49b0e5dc1fc0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CreateFileW
VirtualAlloc
GetStartupInfoA

user32

LoadIconW
LoadCursorA
LoadIconA
LoadCursorW

gdi32

GetStockObject

msvcrt

exit
_acmdln
_cexit
_controlfp
_adjust_fdiv
_c_exit
_except_handler3
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_initterm
__getmainargs
__initenv
_XcptFilter
_exit

advapi32

RegOpenKeyA
RegOpenKeyExA
RegCreateKeyA
RegisterEventSourceA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
DeregisterEventSource
ReportEventA
RegDeleteValueA
RegFlushKey
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
DeleteService
OpenSCManagerA
RegQueryValueExA
SetServiceStatus
CloseServiceHandle
ChangeServiceConfigA
QueryServiceStatus
ControlService
OpenServiceA
CreateServiceA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data23
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data21
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data20
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data19
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data5
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text13
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text12
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text5
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fef88604da968b85aeab49b0e5dc1fc0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 2KB - Virtual size: 1KB

.data23 Size: 512B - Virtual size: 500B

.data21 Size: 512B - Virtual size: 500B

.data20 Size: 512B - Virtual size: 500B

.data19 Size: 512B - Virtual size: 500B

.data5 Size: 114KB - Virtual size: 113KB

.text13 Size: 512B - Virtual size: 16B

.text12 Size: 512B - Virtual size: 16B

.text5 Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 1024B - Virtual size: 580B

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 2KB - Virtual size: 1KB

.data23
Size: 512B - Virtual size: 500B

.data21
Size: 512B - Virtual size: 500B

.data20
Size: 512B - Virtual size: 500B

.data19
Size: 512B - Virtual size: 500B

.data5
Size: 114KB - Virtual size: 113KB

.text13
Size: 512B - Virtual size: 16B

.text12
Size: 512B - Virtual size: 16B

.text5
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 1024B - Virtual size: 580B