ac473bc990337ae5d609a9e9ad14b5458188f25d11c703382e1841eb4f151713

General

Target

ac473bc990337ae5d609a9e9ad14b5458188f25d11c703382e1841eb4f151713
Size

44KB
MD5

76834e967387629520db6ea9579eb6cd
SHA1

81971682444940cdcbb7c054bb06c64ce3a7e34b
SHA256

ac473bc990337ae5d609a9e9ad14b5458188f25d11c703382e1841eb4f151713
SHA512

be60c9e07b11b3bfbae82ab0242e4e13c528800a227925d40c47242af84ce4d4e92c62f4d34b5defb0536776870b0ac977211b0a6d70af75ae32dacc9d96bb37
SSDEEP

768:42ziG+vg5n0FhKCAUl61DTx2u8hodUdPZEhbSzk2GnxPZt:ErTo1B2u8ldhED2GnxPz

Score

N/A

Malware Config

Signatures

Files

ac473bc990337ae5d609a9e9ad14b5458188f25d11c703382e1841eb4f151713
.dll windows x86

42b0a51dc33a5794152596237cb9cd12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GetTempPathA
DeleteFileA
TerminateProcess
WaitForSingleObjectEx
CreateProcessA
WriteFile
GetExitCodeProcess
GetLastError
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
PeekNamedPipe
WaitForSingleObject
WaitForMultipleObjects
CreatePipe
GetFileSize
GetVersionExA
Sleep
CreateFileA
SetFilePointer
ReadFile
CloseHandle
GetComputerNameA
GetFileInformationByHandle
GetModuleFileNameA

advapi32

SetServiceStatus
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegisterServiceCtrlHandlerA

ws2_32

WSACleanup
closesocket
select
recv
socket
htons
connect
send
WSAStartup
inet_addr
gethostbyname
inet_ntoa

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
_snprintf
_beginthreadex
time
wcslen
_CxxThrowException
__CxxFrameHandler
??2@YAPAXI@Z
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
strcpy
memcpy
memset
strlen
atoi
isdigit
strcat
memcmp
_mbsstr
malloc
strchr
strncmp
strncpy
sprintf
strstr
strcmp
??1exception@@UAE@XZ
isxdigit
tolower
isupper
free

Exports

Exports

ServiceMain

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42b0a51dc33a5794152596237cb9cd12

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

msvcrt

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 9KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 1KB