993549485d1cceb2d2347fd807c7a0477be45fdd1c6f89e535b3b539cdb6951f

Sharing

Copy URL Twitter E-mail

General

Target

993549485d1cceb2d2347fd807c7a0477be45fdd1c6f89e535b3b539cdb6951f
Size

224KB
MD5

8c96e6db7002cd5ee9b622e8703a9d7f
SHA1

5dbce3a42165b7cc5d1295dc230e3b41783cd8c3
SHA256

993549485d1cceb2d2347fd807c7a0477be45fdd1c6f89e535b3b539cdb6951f
SHA512

d43316ab49ca1a19e9bbd6b3321784110926b1d05fe02883de597a2724bff3eecb7121a9c6735f31f5f000d066336440d6d6f581be83c3adef45699f12d7f88a
SSDEEP

3072:vCkFtrpu8HZOZ8fzhw5UHHvYeSPTeEsSMZgfMcJdigI+rxU0sFMNTQsm2LDVArVx:vCgOqICq7rfMHgZkpfGArZgSL

Score

N/A

Malware Config

Signatures

Files

993549485d1cceb2d2347fd807c7a0477be45fdd1c6f89e535b3b539cdb6951f
.exe windows x86

60772fe391e311d48ffd60bbea014ff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
SetServiceStatus

kernel32

SetEvent
GetModuleFileNameA
WriteFile
DeleteCriticalSection
WaitForSingleObject
WinExec
DeleteFileA
CloseHandle
CreateProcessA
CopyFileA
Sleep
GetLastError
CreateFileA
GetLocalTime
InitializeCriticalSection
CreateEventA
GetModuleHandleA
FlushFileBuffers
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize

user32

EnableMenuItem
wsprintfA
GetSystemMenu

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PACK
Size: 164KB - Virtual size: 420KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

60772fe391e311d48ffd60bbea014ff2

Headers

File Characteristics

Imports

advapi32

kernel32

user32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 1KB

PACK Size: 164KB - Virtual size: 420KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 1KB

PACK
Size: 164KB - Virtual size: 420KB