cecd481ab7a86540107f10ff431c04e9cba4e28516541d6cc5f1100b4280c4ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cecd481ab7a86540107f10ff431c04e9cba4e28516541d6cc5f1100b4280c4ba
Size

139KB
MD5

ef4ffdbaa21c8b2d95e754df0cf15ec3
SHA1

4906ecb07cbc7274b5591e2bc8e4f8bb9fbdb739
SHA256

cecd481ab7a86540107f10ff431c04e9cba4e28516541d6cc5f1100b4280c4ba
SHA512

3b492fda9c93674c67c935cd68d843eb9e81404abd1cbe2400b4e99dad7bb5747d1c9e3d34c9d761a85293a2cc57d37597dcacf002c6a0ae360d01e312a0a097
SSDEEP

3072:Wl8oqqj/tiR1YOWDYsy5L/rNDmGTVo0qdTBfVly+KWEvz+sS:WlC6iPdZmGTudTBtly+KWEvhS

Score

N/A

Malware Config

Signatures

Files

cecd481ab7a86540107f10ff431c04e9cba4e28516541d6cc5f1100b4280c4ba
.exe windows x86

ce7b2ba5ca6f0a7963632d795181a2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapReAlloc
HeapFree
lstrlenA
HeapAlloc
WritePrivateProfileStringA
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
GetSystemTimeAsFileTime
CloseHandle

user32

wvsprintfA

advapi32

CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE