e986717a359e7ad2f1d24f95efb2fd7580551da3d2beaeebd2587a3882429f0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e986717a359e7ad2f1d24f95efb2fd7580551da3d2beaeebd2587a3882429f0d
Size

16KB
MD5

d4ecc6be5b5af3a481c18d63803b8de0
SHA1

468ff1137c94d042d4a53488be9a2a47d18d0eb2
SHA256

e986717a359e7ad2f1d24f95efb2fd7580551da3d2beaeebd2587a3882429f0d
SHA512

a3d2681ab3c7cc176f736146e86210d56be1fb2025feeaf658d5267ac535e6a3a9ac0f374fd7cf3c79cf926382935ec88a6d3e16f5068126d7a57e5473fa613d
SSDEEP

384:qIZ9oy+kSM7mbmU6wIGhKUBDPww9Tfy9UmGN7T:qIjBSM6bCGhK+DBt6yVT

Score

N/A

Malware Config

Signatures

Files

e986717a359e7ad2f1d24f95efb2fd7580551da3d2beaeebd2587a3882429f0d
.dll windows x86

bcfecd1c4f0c671f4cd77f76a1cb475d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateFileA
GetLastError
DeviceIoControl
FreeLibrary
GlobalFree
LoadLibraryExA
GlobalAlloc
GetProcAddress
lstrcatA
Process32Next
FindResourceA
Process32First
CreateToolhelp32Snapshot
Module32Next
Module32First
OpenProcess
DeleteFileA
GetWindowsDirectoryA
GetCurrentProcess
LoadLibraryA
GetModuleFileNameA
LoadResource
LockResource
SizeofResource
WriteFile
FreeResource
CloseHandle
lstrcpyA
lstrcmpiA
lstrlenA

advapi32

DeleteService
CreateServiceA
StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ChangeServiceConfigA
ControlService

Exports

Exports

testall

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ