e07121eba8ccdb46e8e774b5a3ce0377dacf42237805af89bffc3c014829d59d

General

Target

e07121eba8ccdb46e8e774b5a3ce0377dacf42237805af89bffc3c014829d59d
Size

91KB
MD5

4d5dd80fafb8e9fee7dec4dc23ebe54f
SHA1

4685eef422c2f5e5acd542aa47bfbc83d8ac1556
SHA256

e07121eba8ccdb46e8e774b5a3ce0377dacf42237805af89bffc3c014829d59d
SHA512

81a316412cec11e841ef12f4f2c53de5e4c29835f34f471a3df960a910cfa2b7ac7b49a4e396c52fb5e0315ee1f053024e69c45b9ecc5bcf2b7d5a44372a07e7
SSDEEP

1536:cHnvhNX2n0kTCLm+tDnMHhsBkzAyj/5RZ8WTgUEgGUMewsDF7S/T8/:cHvhl20kTCLmADTBk5j/53TFEnP/sp2e

Score

N/A

Malware Config

Signatures

Files

e07121eba8ccdb46e8e774b5a3ce0377dacf42237805af89bffc3c014829d59d
.exe windows x86

cf9b2b282abb3b753a508c300fbd6653

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
CloseHandle
WriteFile
CreateFileA
lstrcpyA
GetModuleFileNameA
GetCurrentProcess
CreateToolhelp32Snapshot
Sleep
CreateProcessA
MoveFileA
GetCommandLineA
GetStartupInfoA
Process32First
GetCurrentProcessId
Process32Next
GetSystemDirectoryA
DeleteFileA
FreeLibrary
OpenProcess
TerminateProcess
GetWindowsDirectoryA
lstrcatA
GetSystemTime
LoadLibraryA
GetProcAddress
SetFileAttributesA
GetModuleHandleA
ExitProcess
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
SetFileTime
CopyFileA
GetLocalTime
GetFileTime
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
SetFilePointer
lstrcmpiA

user32

wsprintfA
CharUpperBuffA
MessageBoxA

advapi32

OpenServiceA
SetServiceStatus
StartServiceCtrlDispatcherA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
ChangeServiceConfigA
ChangeServiceConfig2A
RegisterServiceCtrlHandlerA

psapi

GetModuleFileNameExA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf9b2b282abb3b753a508c300fbd6653

Headers

File Characteristics

Imports

kernel32

user32

advapi32

psapi

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB