d2a37ad4c11f52d12b81256abcc134fbbf8c5c90e9a2c43d49e3a4adc022bbe3

General

Target

d2a37ad4c11f52d12b81256abcc134fbbf8c5c90e9a2c43d49e3a4adc022bbe3
Size

18KB
MD5

2d3a50b466f12b229969fc2968fbf86a
SHA1

65a34ea924d864eb54bf0c68e97d521a15fd7292
SHA256

d2a37ad4c11f52d12b81256abcc134fbbf8c5c90e9a2c43d49e3a4adc022bbe3
SHA512

34c446a12ce689448f0a3bb88accba11fc601974ea54365bf3776715ea7c3b5617699ea2b82b56c48de14c5fe36ab0c09177bb76bd4bb1cbaef5e1f7761ff05d
SSDEEP

192:TH+/BABpANtVXCJgQdkHT/DgwlQ3cTozUaeUu9Rm6O/GiLrQ++6gXLOg9aAv180l:Te/B+iXVX47dkHT0j8drm/nnPMD9a/

Score

N/A

Malware Config

Signatures

Files

d2a37ad4c11f52d12b81256abcc134fbbf8c5c90e9a2c43d49e3a4adc022bbe3
.dll windows x86

6591d3f5f26b6b30aa5b0da662ee92d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateThread
OutputDebugStringA
EnterCriticalSection
VirtualAlloc
SetLastError
LeaveCriticalSection
CreateEventA
FreeConsole
Sleep
GetVolumeInformationA
InitializeCriticalSection
VirtualFree
SetEvent
WaitForSingleObject
MoveFileExA
lstrlenA
lstrcpyA

user32

wsprintfA
MessageBoxA

advapi32

OpenSCManagerA
SetServiceStatus
QueryServiceStatus
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegisterServiceCtrlHandlerA
DeleteService
CloseServiceHandle
OpenServiceA
RegOpenKeyA
RegCloseKey
ControlService

msvcrt

strcat
wcstombs
strcmp
memcpy
sprintf
memmove
free
malloc
_beginthreadex
strncpy
printf
memset
rand

ws2_32

send
gethostbyname
closesocket
socket
recv
WSACleanup
setsockopt
htons
inet_addr
WSAStartup
inet_ntoa
connect

Exports

Exports

ServiceMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6591d3f5f26b6b30aa5b0da662ee92d8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

ws2_32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 17KB

.CRT Size: 512B - Virtual size: 16B

.rsrc Size: 512B - Virtual size: 176B

.reloc Size: 1024B - Virtual size: 810B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 17KB

.CRT
Size: 512B - Virtual size: 16B

.rsrc
Size: 512B - Virtual size: 176B

.reloc
Size: 1024B - Virtual size: 810B