d92b070626fe6dbcbc2932ae6be6b48aa9627c6eecda17d5a6adc343c395e550

General

Target

d92b070626fe6dbcbc2932ae6be6b48aa9627c6eecda17d5a6adc343c395e550
Size

46KB
MD5

bbf5d8187575179e592b628767cbdd88
SHA1

8189fc3f9c169da8b6dcbd4d013f456a436843da
SHA256

d92b070626fe6dbcbc2932ae6be6b48aa9627c6eecda17d5a6adc343c395e550
SHA512

4aecdfadaa5b23e98d6cadbb7c318a94755ebb479ef9c6e577a3d27ab177042bc3909d3c2dfcaa801aff3b441fc6e75030e1cc3ba4ba04e864e27ff24f00145e
SSDEEP

768:FYhok54gdeTpU7p3JQMZZRsqUWi1sfylcC/1GFObh2T0mzEkQAkDjoM4P5ubTo:sagdmpkQMzRsqN0cCSc0Q5DAujacbE

Score

N/A

Malware Config

Signatures

Files

d92b070626fe6dbcbc2932ae6be6b48aa9627c6eecda17d5a6adc343c395e550
.exe windows x86

c85656d4eb967bac7b1b4f6510d3f0c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseServiceHandle
StartServiceA
OpenServiceA
OpenSCManagerA
CreateServiceA
ControlService
DeleteService

shell32

ShellExecuteA

imagehlp

CheckSumMappedFile

kernel32

GetVersionExA
VirtualAlloc
VirtualFree
LocalFree
CloseHandle
LocalAlloc
ReadFile
SetFilePointer
CreateFileA
WriteFile
GetFileSize
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLastError
DeleteFileA
GetTempPathA
ExitProcess
GetModuleFileNameA
IsBadReadPtr
GetModuleHandleA
GetProcAddress
CreateProcessA
ReadProcessMemory
GetCurrentProcess
Sleep
LoadLibraryA
WriteProcessMemory
VirtualFreeEx
VirtualAllocEx
CreateThread
CreateDirectoryA
GetSystemDirectoryA
OpenFile
FindNextFileA
FindFirstFileA
DeviceIoControl
WinExec
CopyFileA
lstrcatA
lstrcpyA
OutputDebugStringA

user32

wsprintfA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c85656d4eb967bac7b1b4f6510d3f0c1

Headers

File Characteristics

Imports

advapi32

shell32

imagehlp

kernel32

user32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 16B