b937a9491026824a46eaa77a8a18764ddcbd1cb0df514fafd5f04c7d7e7cf0df

General

Target

b937a9491026824a46eaa77a8a18764ddcbd1cb0df514fafd5f04c7d7e7cf0df
Size

10KB
MD5

ad07e85ac802c07affa4614db549e8e4
SHA1

61634fbe19627009b6a5c1603fce4761b5fbf6bf
SHA256

b937a9491026824a46eaa77a8a18764ddcbd1cb0df514fafd5f04c7d7e7cf0df
SHA512

bbc986956ace76f25ca022c96cd2606963ef278b98f96f2f9c54eb398cba338ef78e38e72864e80e63e2a66fc49a709373626bff19fbf8454e49e481ea27dd9b
SSDEEP

192:THMj4Dkim4Qg2BTFLTAcapkaJEi8UoHA/QgIb/:w4Dkigz+bp5f8U2kQd

Score

N/A

Malware Config

Signatures

Files

b937a9491026824a46eaa77a8a18764ddcbd1cb0df514fafd5f04c7d7e7cf0df
.exe windows x86

9a2cbaed55377e4ad2be3ef7780350e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
CloseServiceHandle
StartServiceA
RegCreateKeyA
ChangeServiceConfig2A
OpenServiceA
CreateServiceA
OpenSCManagerA
RegQueryValueExA
RegOpenKeyExA

kernel32

Sleep
GetLastError
CloseHandle
SetFileTime
SystemTimeToFileTime
WriteFile
CreateFileA
MoveFileExA
MoveFileA
DeleteFileA
GetSystemDirectoryA
LockResource
LoadResource
SizeofResource
FindResourceA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange

msvcrt

_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
__getmainargs
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
memcpy
_stricmp
memset
__p__commode

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a2cbaed55377e4ad2be3ef7780350e2

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 1KB - Virtual size: 1KB