b1720fe81fe98b00c0a82b9e827c2d179b258ce021cfa7251cffc5eee1c39802

Sharing

Copy URL Twitter E-mail

General

Target

b1720fe81fe98b00c0a82b9e827c2d179b258ce021cfa7251cffc5eee1c39802
Size

1.3MB
MD5

506552631b586cb0dd3850c25d8f4513
SHA1

faa1fcb448020ea83f1fb236bcb2e2151cb91960
SHA256

b1720fe81fe98b00c0a82b9e827c2d179b258ce021cfa7251cffc5eee1c39802
SHA512

6f7f6ccefc498ea41f52dae8887049b347c6321bf3a3a0da29aa48380aded634c2af56e72ed1fb86c1a355145da178ba54baef848e892948319bd7c8dea3c787
SSDEEP

24576:0HJYD0If1ycIYebu7feorpINCdwr4c2x4pbkLGTd7+a7X/7CDyaLBKGvPD/fXrwR:iUSXwLWNCI4LOt+KzCOEr3rwhVQO

Score

N/A

Malware Config

Signatures

Files

b1720fe81fe98b00c0a82b9e827c2d179b258ce021cfa7251cffc5eee1c39802
.exe windows x86

91925f9425d0c625fc69b5960081d1a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type ��

kernel32

CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
ResumeThread
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
GetTempPathA
FindResourceA
LoadResource
GetModuleHandleA
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
GetModuleFileNameA
SetFilePointer
ReadFile
CloseHandle
DeleteFileA
MoveFileExA
Sleep
GetSystemDirectoryA
SetFileAttributesA
GetTickCount
lstrcatA
GetCurrentProcess

user32

wsprintfA

advapi32

CloseServiceHandle
ControlService
DeleteService
StartServiceA
OpenSCManagerA
CreateServiceA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
OpenServiceA

msvcrt

__setusermatherr
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_itoa
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

Sections

rwchmr
Size: 1.3MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xchms
Size: 48B - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xchnsxc
Size: 80B - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

in
Size: 32B - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sxdinsyd
Size: 32B - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

91925f9425d0c625fc69b5960081d1a5

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

msvcrt

iphlpapi

psapi

Sections

rwchmr Size: 1.3MB - Virtual size: 1.4MB

xchms Size: 48B - Virtual size: 172KB

xchnsxc Size: 80B - Virtual size: 396KB

in Size: 32B - Virtual size: 372KB

sxdinsyd Size: 32B - Virtual size: 172KB

rwchmr
Size: 1.3MB - Virtual size: 1.4MB

xchms
Size: 48B - Virtual size: 172KB

xchnsxc
Size: 80B - Virtual size: 396KB

in
Size: 32B - Virtual size: 372KB

sxdinsyd
Size: 32B - Virtual size: 172KB