9a83a047ad326d0ab33b1bf3811d5988caf221e3a8abf18da70500dbb5652547

Sharing

Copy URL Twitter E-mail

General

Target

9a83a047ad326d0ab33b1bf3811d5988caf221e3a8abf18da70500dbb5652547
Size

1.4MB
MD5

48c8142829137bdc2d55a364356b0884
SHA1

64212b7fa12ba43c06729584196a90656bff8d5d
SHA256

9a83a047ad326d0ab33b1bf3811d5988caf221e3a8abf18da70500dbb5652547
SHA512

48e0455249ed554eab5e916dfa23bfb65a6504dd2935ff5a6f656f3bd9b30d1be6f9689eedbab0ca507d41b9f7530b2956eaac71568149830d7311d7b457dcd4
SSDEEP

24576:GoyejJc6LaonBL2/6sXOYtH0lnRgko2HSHUd5ayqWS7zaauU2p:rLdaaYtHW9o2xNqf/JuR

Score

N/A

Malware Config

Signatures

Files

9a83a047ad326d0ab33b1bf3811d5988caf221e3a8abf18da70500dbb5652547
.exe windows x86

920893aa82632f91e117aba394f1cd1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenSCManagerA ��

kernel32

CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
ResumeThread
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
GetTempPathA
FindResourceA
LoadResource
GetModuleHandleA
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
GetModuleFileNameA
SetFilePointer
ReadFile
CloseHandle
DeleteFileA
MoveFileExA
Sleep
GetSystemDirectoryA
SetFileAttributesA
GetTickCount
lstrcatA
GetCurrentProcess

user32

wsprintfA

advapi32

CloseServiceHandle
ControlService
DeleteService
StartServiceA
OpenSCManagerA
CreateServiceA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
OpenServiceA

msvcrt

__setusermatherr
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_itoa
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

Sections

hmsx
Size: 1.4MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

chn
Size: 80B - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sxcins
Size: 48B - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xdin
Size: 80B - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

syd
Size: 64B - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

920893aa82632f91e117aba394f1cd1d

Headers

File Characteristics

Imports

advapi32

kernel32

user32

advapi32

msvcrt

iphlpapi

psapi

Sections

hmsx Size: 1.4MB - Virtual size: 1.7MB

chn Size: 80B - Virtual size: 372KB

sxcins Size: 48B - Virtual size: 8KB

xdin Size: 80B - Virtual size: 236KB

syd Size: 64B - Virtual size: 272KB

hmsx
Size: 1.4MB - Virtual size: 1.7MB

chn
Size: 80B - Virtual size: 372KB

sxcins
Size: 48B - Virtual size: 8KB

xdin
Size: 80B - Virtual size: 236KB

syd
Size: 64B - Virtual size: 272KB