334a734b9eac765c3a1ed49c59c2edb8f30487ffa48b838dfa6708ec3fa5c435 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

334a734b9eac765c3a1ed49c59c2edb8f30487ffa48b838dfa6708ec3fa5c435
Size

11KB
MD5

e6cf6e3de3c567575c158167b6a9ac13
SHA1

49e5c090ccceed871e7a44d094a90259c9b3c191
SHA256

334a734b9eac765c3a1ed49c59c2edb8f30487ffa48b838dfa6708ec3fa5c435
SHA512

f06a9935e9e6b65ec277745a124c18611e44e8e0cac7784aca022df81d1ddd9e935318fce27ff1dd82889fc82d1237d46afa39ef5e33b0c0f1947f7b4985eaf2
SSDEEP

192:DHtQTPN8dn1VukYpY0tF2Lsc/pCNgwRLOOfNVdbf4dNhoy:btcP2BuiICsB9LOWpbgdr

Score

N/A

Malware Config

Signatures

Files

334a734b9eac765c3a1ed49c59c2edb8f30487ffa48b838dfa6708ec3fa5c435
.exe windows x86

9110947fe72fd6057fc7fe8a5a34b165

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GetModuleFileNameA
GetSystemDirectoryA
GetLastError
SetFileAttributesA
CloseHandle
WriteFile
CreateProcessA
GlobalFree
LockResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceA
GetTempPathA
GetTickCount
lstrcpyA
lstrcatA
GetCurrentThread
ResumeThread
GetCurrentProcess
SetThreadPriority
GetProcAddress
Sleep
lstrlenA
GetModuleHandleA
LoadLibraryA
CreateFileA
GetStartupInfoA

advapi32

RegOpenKeyA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
RegQueryValueExA
StartServiceCtrlDispatcherA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
SetServiceStatus

mfc42

ord924
ord537
ord941
ord535
ord800

msvcrt

__dllonexit
_onexit
_exit
_XcptFilter
__CxxFrameHandler
__getmainargs
_except_handler3
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strncmp
strstr
exit
_initterm
sprintf
_acmdln

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

Sections

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE