aad9b20abbb63f45ff51cd2c44f600b438b1a96ca4ad750cdcf1097f983d22e7

General

Target

aad9b20abbb63f45ff51cd2c44f600b438b1a96ca4ad750cdcf1097f983d22e7
Size

52KB
MD5

3f0ce00fa6440787a3e7615603a02d2b
SHA1

5c085959c4fb6a12ba0e0f31b0a3c327c1ebfa9d
SHA256

aad9b20abbb63f45ff51cd2c44f600b438b1a96ca4ad750cdcf1097f983d22e7
SHA512

2c47f7260a31c81b28cc834a440f6e58adc56b01051219cf0c27fd6d73bea9e833e4fe22841a8ebf551f4237dfe5e6764c3e31ed1d3e85e30cb2a34acdcba3c9
SSDEEP

768:xCTcrDAuJbGmQioHELgHVl9BnoPZ7sdiB9RboY9+MiYfod3omIeG:xCT0D5CELgHVl9MGaFQpo

Score

N/A

Malware Config

Signatures

Files

aad9b20abbb63f45ff51cd2c44f600b438b1a96ca4ad750cdcf1097f983d22e7
.exe windows x86

77d52eb6ffd76d0def557b4cab366458

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
FormatMessageA
lstrlenA
GetLastError
CreateThread
GetExitCodeThread
Sleep
OpenProcess
CloseHandle
OpenFile
GetSystemDirectoryA
CreateProcessA
ReadFile
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
CreateFileA
SetStdHandle
VirtualAlloc
DeleteFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers
WriteFile
GetProcAddress
GetModuleHandleA
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
SetFilePointer
SetEndOfFile

advapi32

CreateServiceA
DeleteService
RegisterServiceCtrlHandlerA
SetServiceStatus
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
StartServiceA
CloseServiceHandle
StartServiceCtrlDispatcherA

wininet

InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetGetConnectedState

psapi

EnumProcesses
EnumProcessModules
GetModuleFileNameExA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

77d52eb6ffd76d0def557b4cab366458

Headers

File Characteristics

Imports

kernel32

advapi32

wininet

psapi

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 512KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 512KB