b77142ed2e09821a59529ac636963ab524060a422acf3225cfc79adf4f20e420

General

Target

b77142ed2e09821a59529ac636963ab524060a422acf3225cfc79adf4f20e420
Size

188KB
MD5

9f83f9c98a6966b2094e29e7fabb900b
SHA1

a7963edeafe18a6fdd3ebc22ec9b73ca4ca19a8a
SHA256

b77142ed2e09821a59529ac636963ab524060a422acf3225cfc79adf4f20e420
SHA512

8824896c0cf367a10547da93787310c0faa9eb6425c7268ee165aabd044ff40da9b50f041e8d0ece4a77885d03d75b022e1144bdf1e48b776b0ef34a02e24213
SSDEEP

3072:OOLxGN2frVnZl3oaLReiDQ49pf0lNY8MsmfrfWgCHnVSiDQzXSay1OGNDe:vL7BZl7LRe949p6ufrOgCHY8QzXSayoQ

Score

N/A

Malware Config

Signatures

Files

b77142ed2e09821a59529ac636963ab524060a422acf3225cfc79adf4f20e420
.exe windows x86

434f80042d5fe77c556b9d92ca3d0c6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowPos
GetSysColor
SetCursor
GetFocus
EnableWindow
PeekMessageA
GetSystemMetrics
LoadIconA
SetDlgItemTextA
GetParent
IsWindow
PostQuitMessage
SetTimer
TranslateMessage
BeginPaint
PostMessageA
SendDlgItemMessageA
GetWindowRect
SetWindowTextA
GetClientRect
wsprintfA
ShowWindow

advapi32

InitializeSecurityDescriptor
LookupPrivilegeValueA
ControlService
CreateServiceA
ChangeServiceConfigA
SetSecurityDescriptorDacl
SetServiceStatus
QueryServiceConfig2A
LookupAccountSidA
EqualSid
UnlockServiceDatabase
RegDeleteValueA
RegSetValueExA
RegEnumValueA
LockServiceDatabase

kernel32

RtlUnwind
HeapFree
VirtualFree
WriteFile
HeapDestroy
GetStdHandle
SetHandleCount
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapCreate
lstrcmpA
IsValidLocale
SetPriorityClass
GetFileType
TlsGetValue
GetTempPathA
QueryPerformanceCounter
UnmapViewOfFile
WriteConsoleA
CreateFileA
MoveFileExA
GetLastError
lstrlenA
GlobalReAlloc
GlobalAlloc
GetCurrentThreadId
GlobalHandle
OpenEventA
GetSystemTimeAsFileTime
SetEvent
SetLastError
GetTimeZoneInformation
DeleteFileA
ExitProcess
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

434f80042d5fe77c556b9d92ca3d0c6b

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 140KB - Virtual size: 140KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 140KB - Virtual size: 140KB