87d81c29718ed201cd4cfe0b728f85ea5e5c4e8fb25717c7398adb09da80a014

Sharing

Copy URL Twitter E-mail

General

Target

87d81c29718ed201cd4cfe0b728f85ea5e5c4e8fb25717c7398adb09da80a014
Size

754KB
MD5

d644d133e79fab971089529bd37a0419
SHA1

1922ff55bbfe6742d0be6512012858908b5534ad
SHA256

87d81c29718ed201cd4cfe0b728f85ea5e5c4e8fb25717c7398adb09da80a014
SHA512

c6125217b2ae305e0a14517f203fa8f2d3a1e414e49a0904439f2b3bf27a0d79caca52f6573bff4747643ce68783f1e165a1a46179a0e163163c78da7c79c505
SSDEEP

12288:ffhTYHFYVV268j2HcwJrkBx+5/22l/vWlA2IYlcboacv7dHYNCmPsn:HhTAwhcmL/2u/eOgms

Score

N/A

Malware Config

Signatures

Files

87d81c29718ed201cd4cfe0b728f85ea5e5c4e8fb25717c7398adb09da80a014
.exe windows x86

6f872db020f9cae58ecbff5172b34b98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
CreateFileMappingA
CreateFileA
SizeofResource
LockResource
LoadResource
UnmapViewOfFile
WriteFile
WaitNamedPipeA
GetLastError
GetSystemDirectoryA
GetWindowsDirectoryA
GetTempPathA
GetTickCount
DeleteFileA
CopyFileA
MoveFileExA
GetCurrentProcess
lstrlenA
Sleep
FindResourceA
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange

advapi32

RegOpenKeyA
RegSetValueExA
RegCloseKey
CreateServiceA
ChangeServiceConfig2A
StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
ControlService
DeleteService
RegCreateKeyA

msvcr90

_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_exit
_cexit
__getmainargs
_amsg_exit
__argc
__argv
strncmp
memcpy
memset
_vsnprintf
rename

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 741KB - Virtual size: 741KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f872db020f9cae58ecbff5172b34b98

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcr90

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 741KB - Virtual size: 741KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 741KB - Virtual size: 741KB

.reloc
Size: 3KB - Virtual size: 2KB