9745355642f2bd1d019e3441dbac1364a2fc37c6226cb3253a5423115ff8e48b

General

Target

9745355642f2bd1d019e3441dbac1364a2fc37c6226cb3253a5423115ff8e48b
Size

132KB
MD5

6a7572139e8460855df449d10f017d28
SHA1

4f502a7b2f2ce198146c10d170800c54e96d838f
SHA256

9745355642f2bd1d019e3441dbac1364a2fc37c6226cb3253a5423115ff8e48b
SHA512

0762d1b651cd80bfb4c0a287a9dbdf5ca802c565cd501c2eb5603edadf166e4b05e123229fabebe8d2add8ace99efe24d7c0a6c2bade7e5c89029880783cd400
SSDEEP

3072:j+pvMjsUEMKJ80qtQa3aSffNIscJ12UTLhP:jKEbn3B+J5P

Score

N/A

Malware Config

Signatures

Files

9745355642f2bd1d019e3441dbac1364a2fc37c6226cb3253a5423115ff8e48b
.exe windows x86

6d4dec018e921bacb1e2e37883c3c70f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetLastError
GetModuleFileNameA
CreateFileA
GetStartupInfoA
GetModuleHandleA
Sleep
WinExec
GlobalAlloc
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
CloseHandle
LoadLibraryA

user32

TranslateMessage
PostQuitMessage
DefWindowProcA
GetDesktopWindow
DispatchMessageA
CreateWindowExA
GetMessageA
RegisterClassExA
ShowWindow

advapi32

ConvertSidToStringSidA
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
DeleteService
LookupAccountNameA
GetUserNameA
CreateServiceA

msvcrt

__getmainargs
_stricmp
_controlfp
__set_app_type
__p__fmode
rand
sprintf
strstr
_access
srand
time
fclose
fflush
fwrite
fopen
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
_exit
_XcptFilter
exit
_acmdln
_strlwr
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

shlwapi

SHDeleteKeyA
SHSetValueA
StrStrA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

dbghelp

ImageNtHeader

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d4dec018e921bacb1e2e37883c3c70f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

shlwapi

version

dbghelp

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 104KB - Virtual size: 101KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 104KB - Virtual size: 101KB

.rsrc
Size: 4KB - Virtual size: 1KB