312ff5de6f53f787113023c889498cb0d670d8a3ec989a09f99802eeb55c7191

General

Target

312ff5de6f53f787113023c889498cb0d670d8a3ec989a09f99802eeb55c7191
Size

27KB
MD5

18f4d242fd0bb406e2fcf5478a7e2b50
SHA1

2a1939dac43a3fb587229c658e199c8899be748a
SHA256

312ff5de6f53f787113023c889498cb0d670d8a3ec989a09f99802eeb55c7191
SHA512

28e146ff09e7897e1be6624e37114e1fcd71bfeecfeafc03a714d3d89abc6575b6f221271a177c555fa3dfbec2c867145d14b90cc2bfbf77af0c11c586bef2cb
SSDEEP

384:fJVW1TCsGFX6/555+555ypYkyEEpYZGW9mkLztqZYsY1jhd1c:uCZ6/555+555spYpYZGW9mopF/9hA

Score

N/A

Malware Config

Signatures

Files

312ff5de6f53f787113023c889498cb0d670d8a3ec989a09f99802eeb55c7191
.exe windows x86

9b5f3937b286c1532553167f57cd7647

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
CreateFileMappingA
GetCurrentProcessId
CreateEventA
SetEvent
CopyFileA
GetCurrentProcess
FreeLibrary
CloseHandle
CreateProcessA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetLastError
GetVersion
GetCommandLineA
GetShortPathNameA
Sleep
SetFileTime
GetFileTime
CreateFileA
WriteFile
ReadFile
UnmapViewOfFile
SetPriorityClass
OpenFileMappingA
WaitForSingleObject
OpenEventA
GetEnvironmentVariableA
FindClose
FindNextFileA
FindFirstFileA
GetVolumeInformationA
DeleteFileA
SetThreadPriority
GetCurrentThread
MapViewOfFile

advapi32

RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
SetServiceStatus
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
QueryServiceConfigA
ControlService
StartServiceA
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
OpenServiceA
ChangeServiceConfigA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
memcpy
_stricmp
strcmp
_strnicmp
time
srand
malloc
free
strchr
_strlwr
_except_handler3
sprintf
strlen
rand
strcpy
strcat
memset

shell32

SHGetSpecialFolderPathA

shlwapi

PathFileExistsA
SHDeleteKeyA
PathFindFileNameA

Sections

WIN0
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9b5f3937b286c1532553167f57cd7647

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

shell32

shlwapi

Sections

WIN0 Size: 24KB - Virtual size: 24KB

.avp Size: 2KB - Virtual size: 4KB

WIN0
Size: 24KB - Virtual size: 24KB

.avp
Size: 2KB - Virtual size: 4KB